Step 1: The Inspection

Welcome, Agent. You have successfully initialized the capture-the-flag node.

Your first assignment is simple: Inspect the server's HTTP response headers. Web servers often leak sensitive routing directories or developer-only environments in their headers.

Look for a header key named X-Secret-Route. It contains the relative URL where Step 2 is located.

Once you extract the header value, navigate to that path to continue.