[{"_1":2,"_32":-5,"_33":-5},"loaderData",{"_3":4},"routes/challenges.$slug",{"_5":6},"challenge",{"_7":8,"_9":8,"_10":11,"_12":13,"_14":15,"_16":17,"_18":19,"_20":21,"_22":23,"_29":30},"slug","promise","name","category","Malware Reverse Engineering","description","A Node.js project was recently deployed as part of an internal development workflow. Shortly after execution, unusual outbound traffic and unexpected system behavior were reported. Your task is to review the project, understand how it behaves at runtime, and determine what data was ultimately sent outside the environment. flag format: flag{discord_webhook_id}","descriptionHtml","

A Node.js project was recently deployed as part of an internal development workflow. Shortly after execution, unusual outbound traffic and unexpected system behavior were reported.

Your task is to review the project, understand how it behaves at runtime, and determine what data was ultimately sent outside the environment.

flag format:

flag{discord_webhook_id}

","labDetails","Prerequisites & Requirements Basic Node.js and NPM Knowledge: Fundamental understanding of Node.js project structure, package.json , node_modules, and how npm manages dependencies. Intermediate JavaScript Proficiency: Ability to read, understand, and identify suspicious patterns in JavaScript code, including common library usage and built-in Node.js modules. Basic Web Concepts: Familiarity with HTTP requests, webhooks, and how data can be exfiltrated over a network. What will you learn? Identify Malicious NPM Packages: Develop skills in recognizing indicators of compromise within node_modules and identifying suspicious packages that mimic legitimate ones. Analyze Malicious JavaScript Behavior: Learn to trace the execution flow of malicious JavaScript code, identifying functions for file system interaction, command execution, and data exfiltration. Uncover Data Exfiltration Mechanisms: Understand how sensitive data is collected from compromised systems ( e.g ., browser data) and transmitted to attacker-controlled infrastructure ( e.g ., Discord webhooks). Tools CyberChef: A versatile web-based tool for decoding Base64 strings and other data transformations.","labDetailsHtml","

Prerequisites & Requirements

Basic \n Node.js\n and NPM Knowledge: Fundamental understanding of \n Node.js\n project structure, \n package.json\n , node_modules, and how npm manages dependencies.
Intermediate JavaScript Proficiency: Ability to read, understand, and identify suspicious patterns in JavaScript code, including common library usage and built-in \n Node.js\n modules.
Basic Web Concepts: Familiarity with HTTP requests, webhooks, and how data can be exfiltrated over a network.

What will you learn?

Identify Malicious NPM Packages: Develop skills in recognizing indicators of compromise within node_modules and identifying suspicious packages that mimic legitimate ones.
Analyze Malicious JavaScript Behavior: Learn to trace the execution flow of malicious JavaScript code, identifying functions for file system interaction, command execution, and data exfiltration.
Uncover Data Exfiltration Mechanisms: Understand how sensitive data is collected from compromised systems ( \n e.g\n ., browser data) and transmitted to attacker-controlled infrastructure ( \n e.g\n ., Discord webhooks).

Tools

CyberChef: A versatile web-based tool for decoding Base64 strings and other data transformations.

","level","Easy","tags",[24,25,26,27,28],"Malware Analysis","C2 Communication","Api Calls","Behavioral Analysis","Spyware","jobPositions",[31],"Malware Analyst","actionData","errors"]

promise

Overview

Job Positions

Tags