Flag Command
Description
POINTS: 375 DIFFICULTY: very easy
Embark on the "Dimensional Escape Quest" where you wake up in a mysterious forest maze that's not quite of this world. Navigate singing squirrels, mischievous nymphs, and grumpy wizards in a whimsical labyrinth that may lead to otherworldly surprises. Will you conquer the enchanted maze or find yourself lost in a different dimension of magical challenges? The journey unfolds in this mystical escape!
Solution
The application on given server seems to be CLI game:
If we take a look at source code we can see linked scripts:
<script src="/static/terminal/js/commands.js" type="module"></script>
<script src="/static/terminal/js/main.js" type="module"></script>
<script src="/static/terminal/js/game.js" type="module"></script>main.js seems interesting, probably handles all user input.
Since the appication is client side it must make requests to server to display updated information.
Searching for fetch( reveals few endpoints:
...
await fetch('/api/monitor', {
...
fetch('/api/options')
...Inspect the request using Dev Tools or just curl.
>> start
YOU WAKE UP IN A FOREST.
You have 4 options!
HEAD NORTH
HEAD SOUTH
HEAD EAST
HEAD WEST
>> Blip-blop, in a pickle with a hiccup! Shmiggity-shmack
HTB{D3v3l0p3r_t00l5_4r3_b35t_wh4t_y0u_Th1nk??!}
You escaped the forest and won the game! Congratulations! Press restart to play again.Flag: HTB{D3v3l0p3r_t00l5_4r3_b35t_wh4t_y0u_Th1nk??!}
Last updated