Flag Command — HTB Writeup | The Hack Sparrow

A terminal-style web "game" keeps its logic in the frontend. The command list — including a secret one — travels in an API response you can read straight from DevTools.

Challenge overview

Field	Value
Platform	Hack The Box · Challenge
Category	Web
Difficulty	Very Easy
State	Retired

Attack map

[Web /] terminal-style game
      │
      ▼
[DevTools ▸ Network] /api/options
      │
      ▼
[JSON] secret command
      │
      ▼
[FLAG]

Un "juego" web tipo terminal esconde su lógica en el frontend. La lista de comandos —incluido uno secreto— viaja en una respuesta de la API que se ve en las DevTools.

Ficha del challenge

Campo	Valor
Plataforma	Hack The Box · Challenge
Categoría	Web
Dificultad	Very Easy
Estado	Retirado

Mapa del ataque

[Web /] juego tipo terminal
      │
      ▼
[DevTools ▸ Network] /api/options
      │
      ▼
[JSON] comando secreto
      │
      ▼
[FLAG]

🔒 Free account required

This is USER ACCESS content — free to unlock, no payment. The rest of the write-up (and everything else at this level) opens up once you're signed in.

Create a free account