Files
wowbug/docs/forecourt-puzzle-clues.md
T
robbiepaul 40eb06a75a
CI / scan_ruby (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / test (push) Has been cancelled
Update
2026-04-29 12:26:59 +01:00

71 lines
2.2 KiB
Markdown

# Forecourt Puzzle Guide
This file is for the puzzle owner only and should not be linked from the UI.
## Final password
`GEAR-AXLE-TURBO-PARK`
## Route
- Hidden route: `/internal/pdi-bundle-7c4f`
- Discovery points on the stock page:
- Stimulus controller source for the stock page (`listing_puzzle_controller`)
- Optional hidden hint drawer after clicking the Forecourt logo 5 times (the drawer renders the controller's stored path at runtime)
## Stage 1
- Location: main image caption on the stock page
- Visible clue: `Photo set 03 // ingest note JHDU // something seems shifted.`
- Solve method: Caesar shift back by 3
- Answer: `GEAR`
## Stage 2
- Location: "Factory options" table
- Visible hint: `The stock sheet is longer than the original order form. Initial entries on verified lines only.`
- Solve method:
- use only the rows verified from `Order form`
- then take the first letter of each option name in top-to-bottom order
- Aluminium look fuel cap
- Xenon headlamps with PDLS
- Leather steering column casing
- Extended interior package
- Answer: `AXLE`
## Stage 3
- Location: hidden JSON blob in the stock page source
- Element ID: `forecourt-media-manifest`
- Encoded value: `VFVSQk8=`
- Solve method: Base64 decode
- Answer: `TURBO`
## Stage 4
- Location: "Inspection notes" card
- Visible hint: `The workshop printout is still shown newest first. Call or text the team for more details.`
- Note references:
- `OBS-17-09` (`Advisory`, ignore this row)
- `INS-88-52`
- `INS-88-73`
- `INS-88-21`
- `INS-88-71`
- Solve method:
- use only the notes marked `Filed`
- the card is shown newest first, so read the filed notes from oldest to newest
- decode the final two digits as classic mobile keypad `key + tap count`
- 71 = P (`7` pressed once)
- 21 = A (`2` pressed once)
- 73 = R (`7` pressed three times)
- 52 = K (`5` pressed twice)
- Answer: `PARK`
## Admin behavior
- `GET /internal/pdi-bundle-7c4f` shows the login prompt
- The login prompt tells solvers to use the words in page order
- Entering `GEAR-AXLE-TURBO-PARK` unlocks the fake admin panel
- The unlocked panel shows a single red `Delete database` button
- Clicking it triggers the alert: `congratulations you solved the wowbug challenge 2026`