Level 2

Kawoosh!

Solution

First, we will open the dev tools (f12) as earlier. We see the following structure:


<!DOCTYPE html>
<html lang="en">
<head>
  <link rel="stylesheet" href="styles.css">
  <title>Code Quest - Level 2</title>
</head>
<body>
  <h1>Level 2</h1>
  <h2>Kawoosh!</h2>
  <p>Congratulations, you made it to level 2.</p>
  <p>Unfortunately this level is broken. Fix it to continue your path.</p>
  <script>
    var secretUrl = btoa("YWxsLXlvdXItYmFzZTY0LWFyZS1iZWxvbmctdG8tdXM=");
    document.write("<p>Solution is at <a href='" + secretUrl + "'>/" + secretUrl + "</a> (with the previous port)</p>");
  <script>
</body>
</html>

The most structure is as in the previous level, but now we have script.


<script>
  var secretUrl = btoa("YWxsLXlvdXItYmFzZTY0LWFyZS1iZWxvbmctdG8tdXM=");
  document.write("<p>Solution is at <a href='" + secretUrl + "'>/" + secretUrl + "</a> (with the previous port)</p>");
<script>

So secretUrl contains encoded in base64 string. Maybe this is our key to the next level.And then the script adds this secretUrl to the webpage as link with the additional text.

Let's decode our string. We take YWxsLXlvdXItYmFzZTY0LWFyZS1iZWxvbmctdG8tdXM=.
Go to the any online base64 decoder, paste and press 'Decode'. And..

The result of decoding is all-your-base64-are-belong-to-us.
Let's add to it / and change the port back to 80 as was in the instructions said.

So our result url will be:
http://18.198.170.188:80/all-your-base64-are-belong-to-us

If we go to this url we will see
congratulations page whith the link to the Level 3 ( task / solution )

Back