aspnetmonsters / irrelevantcode Goto Github PK

ZnVuY3Rpb24gaW52b2tlVGhlTm90Q29udGVzdCgpeyQoIiNob25leS1wb3QiKS5tb2RhbCgpfWNvbnNvbGUubG9nKCJPaCwgdGhlcmUncyBhIGNvbnRlc3QuIik7

The journey starts from the GitHub organization of AspNetMonsters. Once there if you scroll down you will see a weird looking repository which actually stands out due to its weird description which is :

Not used, likely will remove

So if you open the code in that repository
you will see this:

looking at the code the == at the end of the string interpolation format in Console.WriteLine will assure you that its a Base64 encoded string so time to decode it. I used an online decoder

press decode

or you can clone the repository a do something like System.Text.Encoding.UTF8.GetString(Convert.FromBase64String($"{whysosnoopy}{mid}{term}"))
Now if you visit the website
you will see this

but like anyone curious you will open the source code

and will see some weird looking code in it

<form method="post">
    <div id="honey-pot" class="modal fade" tabindex="-1" role="dialog">
        <div class="modal-dialog">
            <div class="modal-content">
                <div class="modal-header">
                    <button type="button" class="close" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
                    <h4 class="modal-title">Not a contest.</h4>
                </div>
                <div class="modal-body">
                    <p>If this were a contest, you'd put in a code here:</p>
                    <p><input name="secretCode" type="text" class="form-control" /></p>
                </div>
                <div class="modal-footer">
                    <button type="submit" class="btn btn-primary"><i class="glyphicon glyphicon-remove"></i> Don't Submit</button>
                </div>
            </div>
        </div>
    </div>
</form>

now if you scroll down further you will see the script files
<script src="/js/site.min.js?v=-qyse9cmprVHnWt0HGWj0Paxf0JuLs9hEpIH7S0EMus"></script>
now if you open the script file you will see
function invokeTheNotContest(){$("#honey-pot").modal()}console.log("Oh, there's a contest.");
now trigger the invokeTheNotContest() function from developer console you will see this dialogue

if you remember the form tag in the source code there was an input tag in it <input name="secretCode" type="text" class="form-control" /> and the name of the parameter is secretCode if you remember correctly the was also a weird line in the code so that has to be the secretCode you are looking for.
Now just run the app and look at the value of notusedanywhere variable

enter it into to the dialogue and hit Don't Submit and voila you are done
It will prompt you that you have won the contest and have you tweet @AspNetMonsters to let them know.

Note: for decoding base64 in core clr add System.Text.Encoding package to dnxcore50:dependencies and use the overload method