← All Challenges
Challenge 42 of 66

Key Hunter

🟠 Hard Recon +100 XP

A mobile app bundles its API key in the JavaScript source. Decompile the app and extract the hardcoded secret.

Key Hunter // sandbox
Search the JS bundle for patterns like API_KEY, Authorization, Bearer, or base64 strings.

🏆 Challenge Complete!

+100 XP earned
Next Challenge →