← Back to Writeups
HTBN/AWeb
Bookmark

Trapped Source

XESXOR8/23/20261 min read
#web#htb#n/a

Trapped Source

Platform: HackTheBox | Category: Web | Difficulty: N/A | Author: D3v0o0Nu11 | Date: 2026-02-10

Description

Intergalactic Ministry of Spies tested Pandora's movement and intelligence abilities. She found herself locked in a room with no apparent means of escape. Her task was to unlock the door and make her way out. Can you help her in opening the door?

Solution Approach

Core idea: Identify the weakness from source review or fingerprinting first. Iterate with incremental payloads instead of guessing.

Steps

  1. In this challenge we're given a webapps with a pin feature as it's password, it seems we need to guess the correct pin with 4 digits either to login or get the flag.

  2. What comes to my mind we might have to make a script to bruteforce the pin, but when i opened the page source, there's a pin hardcoded there.

PIN - 1977

  1. Got the flag!

Flag

REDACTED

Lessons Learned

  1. Identify the weakness from source review or fingerprinting first.
  2. Iterate with incremental payloads instead of guessing.
  3. Reuse the same pattern in future engagements.