1. https://www.hackthebox.eu/invite
2. Console
   • "This page loads an interesting javascript file. See if you can find it :)"
3. Sources
   • https://www.hackthebox.eu/js/<no-spoilers>.min.js
   • //This javascript code looks strange...is it obfuscated???
4. Deobfuscate (http://www.jsnice.org/)
   • function <no-spoilers>() {}
5. Console
   • run <no-spoilers>()
   • data: "<no-spoilers>" hint: "Data is encrypted … We should probably check the encryption type in order to decrypt it…"
6. Decrypt (Cyberchef)
   • In order to generate the invite code, make a POST request to <no-spoilers>
7. POST
   • curl --data '' https://www.hackthebox.eu/<no-spoilers>
   • {"success":1,"data":{"code":"<no-spoilers>","format":"encoded"},"0":200}
8. Decrypt (Cyberchef)
   • Invite code! success!