Test out this concept with a lab I helped develop at https://app.hackinghub.io/surl
Reversing and Tooling a Signed Request Hash in Obfuscated JavaScript
Author: 
Brett Buerhaus
Brett BuerhausJavaScript Reversing
DEFCON 29 CTF Qualifier: 3FACTOOORX Write-up
Author: Brett Buerhaus
Brett Buerhaus
I recently participated with the CTF team Norse Code representing Hacking for Soju in the DEFCON 29 CTF qualifiers. There was a web challenge, so I went full speed ahead to solve it. Overall the challenge is fairly straightforward and not too difficult, but I decided to do a write-up on it to demonstrate one way that you are able to work through obfuscated JavaScript.
The challenge begins with a website link and a Chrome browser extension that you can download.