Opening up the webpage, we get a browser-based text adventure game. Pretty neat.
Poking around in the developer tools (F12), I noticed an interesting endpoint under the Network tab. There’s an options request that reveals a secret value in the response headers.
Hmm, let’s try using that secret value in the game:
>> start
YOU WAKE UP IN A FOREST.
You have 4 options!
HEAD NORTH
HEAD SOUTH
HEAD EAST
HEAD WEST
>> Blip-blop, in a pickle with a hiccup! Shmiggity-shmack
HTB{D3v3l0p3r_t00l5_4r3_b35t__t0015_wh4t_d0_y0u_Th1nk??}
Flag: HTB{D3v3l0p3r_t00l5_4r3_b35t__t0015_wh4t_d0_y0u_Th1nk??}