70 lines
2.0 KiB
Markdown
70 lines
2.0 KiB
Markdown
# Forecourt Puzzle Guide
|
|
|
|
This file is for the puzzle owner only and should not be linked from the UI.
|
|
|
|
## Final password
|
|
|
|
`GEAR-AXLE-TURBO-PARK`
|
|
|
|
## Route
|
|
|
|
- Hidden route: `/admin`
|
|
- Discovery points on the advert page:
|
|
- HTML comment near the top of the page source
|
|
- Browser console message from the Stimulus controller
|
|
- Optional hidden hint drawer after clicking the Forecourt logo 5 times
|
|
|
|
## Stage 1
|
|
|
|
- Location: main image caption on the advert page
|
|
- Visible clue: `Photo set 03 // ingest note JHDU // something seems shifted.`
|
|
- Solve method: Caesar shift back by 3
|
|
- Answer: `GEAR`
|
|
|
|
## Stage 2
|
|
|
|
- Location: "Document packet" table
|
|
- Visible hint: `The seller uploaded the original paperwork bundle and a few newer scans. Check the details carefully.`
|
|
- Solve method:
|
|
- use only the rows marked `Scan`
|
|
- then take the first letter of each entry in the `Detail` column
|
|
- Alignment printout tucked behind service invoices
|
|
- XPEL warranty card added to the folder
|
|
- Leather sleeve re-dyed to match the cabin
|
|
- Emergency cartridge dated and photographed
|
|
- Answer: `AXLE`
|
|
|
|
## Stage 3
|
|
|
|
- Location: hidden JSON blob in the advert page source
|
|
- Element ID: `forecourt-media-manifest`
|
|
- Encoded value: `VFVSQk8=`
|
|
- Solve method: Base64 decode
|
|
- Answer: `TURBO`
|
|
|
|
## Stage 4
|
|
|
|
- Location: "Pre-sale prep tickets" card
|
|
- Visible hint: `The prep desk export is still sorted by latest activity. Closed tickets all share the same base code, and only one part changes.`
|
|
- Ticket codes:
|
|
- `PDI-24-09` (`Open`, ignore this row)
|
|
- `PDI-24-11`
|
|
- `PDI-24-18`
|
|
- `PDI-24-01`
|
|
- `PDI-24-16`
|
|
- Solve method:
|
|
- use only the `Closed` tickets
|
|
- the card is shown newest first, so read the closed tickets from oldest to newest
|
|
- map the changing numeric suffixes with A=1
|
|
- 16 = P
|
|
- 01 = A
|
|
- 18 = R
|
|
- 11 = K
|
|
- Answer: `PARK`
|
|
|
|
## Admin behavior
|
|
|
|
- `GET /admin` shows the login prompt
|
|
- Entering `GEAR-AXLE-TURBO-PARK` unlocks the fake admin panel
|
|
- The panel is session-backed only and can be cleared with the "Clear admin session" button
|