advent-of-cyber-2025

Room Link:
https://tryhackme.com/room/obfuscation-aoc2025-e5r8t2y6u9

▶️ The Social Dork – Day 18 Video Walkthrough

Official walkthrough for quick onboarding:

🔗 YouTube Link:
https://youtu.be/gOj13IC39hA?si=aVW5hQiUbOgZFRg3

🎄 Advent of Cyber 2025 — Day 18 Write-Up

🧩 Obfuscation — The Egg Shell File

✅ Challenge Answers

1️⃣ What is the first flag after deobfuscating the C2 URL and running the script?

c2 obfuscation

The variable names provide a strong hint that the value is Base64-encoded.

base64 decode

After decoding the C2 URL and executing the script:

script execution

THM{C2_De0bfuscation_29838}

2️⃣ What is the second flag after obfuscating the API key and running the script again?

api obfuscation

api decode

final flag

THM{API_Obfusc4tion_ftw_0283}