> For the complete documentation index, see [llms.txt](https://kunalwalavalkar.gitbook.io/write-ups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kunalwalavalkar.gitbook.io/write-ups/root-me/web-client/javascript-obfuscation-1.md).

# Javascript - Obfuscation 1

<figure><img src="https://1586847736-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtSZ40gLWhBDTzPEgHsVB%2Fuploads%2FUQFCyB9nYDJiEcHLrubx%2F1.png?alt=media&amp;token=7f4eda5e-10c0-4913-a067-bbb3f45be512" alt=""><figcaption></figcaption></figure>

Let's check the source code with `CTRL + U`.

<figure><img src="https://1586847736-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtSZ40gLWhBDTzPEgHsVB%2Fuploads%2F48x1tVtXnkSfILZiFOhb%2F2.png?alt=media&amp;token=25a13bcb-66a4-460a-837a-544be6a332ed" alt=""><figcaption></figcaption></figure>

We can see that the password is Hex-encoded.

We can decode it using the `decodeURI` function.

<figure><img src="https://1586847736-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtSZ40gLWhBDTzPEgHsVB%2Fuploads%2FCcx3UuSwoR4iEDHqvlTU%2F3.png?alt=media&amp;token=c522964f-80be-4804-ac20-0a0651c439aa" alt=""><figcaption></figcaption></figure>

```javascript
> decodeURI("%63%70%61%73%62%69%65%6e%64%75%72%70%61%73%73%77%6f%72%64")
<- 'cpasbiendurpassword'
```

Let's enter the decoded password.

<figure><img src="https://1586847736-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtSZ40gLWhBDTzPEgHsVB%2Fuploads%2FyyPv51fAIZJ7rBxJqLP9%2F4.png?alt=media&amp;token=16eaafad-9ee1-48dd-9f7d-5ec7946d3861" alt=""><figcaption></figcaption></figure>

## Password

```
cpasbiendurpassword
```
