HackBlue

Labs / Email and phishing

Unwrap a rewritten link

The gateway rewrote every link through its click-checker. Decode the base64 parameter to see the real destination, without clicking, and count how many people received it.

  • Terminal mission
  • Intermediate
  • 3 objectives
  • 0 of 3 solved

Briefing

Link protection services replace URLs in mail with their own, carrying the original as a parameter, so they can check it at click time. That also hides the real destination from anyone reading the message.

This gateway encodes the original URL in the u= parameter with base64. cut and base64 -d undo it.

analyst@mail-triage

mail-triage · Email and phishing

Type help for the command list and objectives for your tasks. Everything runs in this browser.

Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.