Flag Command

We are given a website like this:

Solution

It is actually a game in JavaScript, using an API to get available commands from /api/options. If we check these, we see 4 steps, and commands for each of the steps:

Actually, there is a secret step, so maybe we can use that command to get the flag…

Flag

And that’s it, here we have the flag:

HTB{D3v3l0p3r_t00l5_4r3_b35t__t0015_wh4t_d0_y0u_Th1nk??}