wowbug/docs/forecourt-puzzle-clues.md

Forecourt Puzzle Guide

This file is for the puzzle owner only and should not be linked from the UI.

Final password

GEAR-AXLE-TURBO-PARK

Route

• Hidden route: /admin
• Discovery points on the advert page:
  • HTML comment near the top of the page source
  • Browser console message from the Stimulus controller
  • Optional hidden hint drawer after clicking the Forecourt logo 5 times

Stage 1

• Location: main image caption on the advert page
• Visible clue: Photo set 03 // ingest note JHDU // something seems shifted.
• Solve method: Caesar shift back by 3
• Answer: GEAR

Stage 2

• Location: "Document packet" table
• Visible hint: The seller uploaded the original paperwork bundle and a few newer scans. Check the details carefully.
• Solve method:
  • use only the rows marked Scan
  • then take the first letter of each entry in the Detail column
  • Alignment printout tucked behind service invoices
  • XPEL warranty card added to the folder
  • Leather sleeve re-dyed to match the cabin
  • Emergency cartridge dated and photographed
• Answer: AXLE

Stage 3

• Location: hidden JSON blob in the advert page source
• Element ID: forecourt-media-manifest
• Encoded value: VFVSQk8=
• Solve method: Base64 decode
• Answer: TURBO

Stage 4

• Location: "Pre-sale prep tickets" card
• Visible hint: The prep desk export is still sorted by latest activity. Closed tickets all share the same base code, and only one part changes.
• Ticket codes:
  • PDI-24-09 (Open, ignore this row)
  • PDI-24-11
  • PDI-24-18
  • PDI-24-01
  • PDI-24-16
• Solve method:
  • use only the Closed tickets
  • the card is shown newest first, so read the closed tickets from oldest to newest
  • map the changing numeric suffixes with A=1
  • 16 = P
  • 01 = A
  • 18 = R
  • 11 = K
• Answer: PARK

Admin behavior

• GET /admin shows the login prompt
• Entering GEAR-AXLE-TURBO-PARK unlocks the fake admin panel
• The panel is session-backed only and can be cleared with the "Clear admin session" button