# Write-up

### <mark style="color:purple;">Objective</mark>

The goal of this machine is to "find the flag."

***

### <mark style="color:purple;">Reconnaissance</mark>

The first thing we do is visit the URL provided by HackTheBox:

```
<URL_OF_THE_MACHINE>
```

Once we access it, we find ourselves in what appears to be a game interface. Our first action is to try if it's a console by running a simple ping command.

```
ping <IP>
```

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcCfpN4eyrRn3Amfein0N5oOdwhBGsmsv3A6CK6D_8b0ScwcG8X-4HjrAWkfmDHBbN9CiDF_kuXrFcthf25nNDPtMCwyQkzmV2EuZ9VGfrX1rtB39bw6yKUbQ7LuiTLGjCgSJal?key=KQRvaJoikxI5cqNfQcN9bOHW" alt="" width="563"><figcaption></figcaption></figure>

But it doesn't work. Next, we try typing `help` to see if we get any useful commands.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfE1wRHrl2J3_i1VecbOdyKdKJFzj8nlUlFINiXlddi0OExykM42vvqhzVJwQi97vLgke7SLsz2RZ2vz1yoExKOQVwMttYQuw0r1Gtw5obxRpo4fxK4L3DJY-pipL5JdPz_iRAu?key=KQRvaJoikxI5cqNfQcN9bOHW" alt="" width="375"><figcaption></figcaption></figure>

***

### <mark style="color:purple;">Exploring the game</mark>

After typing `help`, we see a list of available commands. We decide to press "start" and see what happens.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfZEGZG583ZAZbhmJQ7J_dtHgRvkIJ6FJvL1Vtvyttb7ExfXOVK1ZU_w1sCuvWZWb7TcPrWEyE94TJBIisx_J5UEnzUTLoTUEMOFcXUUURXdCoRRo4q_Fn0KcTQsKlxmnW_tVrn6Q?key=KQRvaJoikxI5cqNfQcN9bOHW" alt="" width="563"><figcaption></figcaption></figure>

Unfortunately, it seems like we made the wrong choice. Let's inspect the page source and see if there's something we missed.

***

### <mark style="color:purple;">Inspecting the Source Code</mark>

We use the browser’s **Inspect Element** tool and head to the **Network** tab to see if we can find any interesting data or hidden elements.

In the "options" section, we notice something curious. There’s a **secret** hidden down below. We decide to use this secret as input in the game.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdlSr2tK3v5WqAxw99HsBltw5U3-iyOfp06S4tBuFHUd73VMKoo_sAniCHC6yYYoQNKvPNoLl1bHa056C-nfwA8LgTKieztfxarTxuxB3dGnApikHjqHSIbTQzWfDiQNAYbW1SFHw?key=KQRvaJoikxI5cqNfQcN9bOHW" alt="" width="563"><figcaption></figcaption></figure>

***

### <mark style="color:purple;">The Flag</mark>

By entering this secret message, we instantly find the flag.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXegaTeOyH9R9dyN8kZrOO2JANhvSUPKrYFOlDbyWZIiaj3Rc7Pd7eB6bGtjMacaOb9UZQsebGzwNJBQ_E91iwzH1okSAvaBpgqwzNgAFncwQmVsh8OQlBLY5kOB205gWFWx-h56eQ?key=KQRvaJoikxI5cqNfQcN9bOHW" alt="" width="563"><figcaption></figcaption></figure>
