Elf Hunt

Tools/Skills: Browser's Developer Tools, HTML, JavaScript, Runtime Modifications, Burp Suite, JSON Tokens

SYNOPSIS

In a computer game, I needed to stop 75 elves by clicking on them. These elves were fast and kept changing directions.

A provided hint suggested that I look at modifying the JSON token.

The way I solved this was with runtime modifications, altering variables in the console with Chrome's Developer Tools.

I also tried to solve this in two other ways:

  1. I tried to solve it with Burp Suite to modify the response. This way I believe would have worked if I was paying for Burp Suite, but I was unable to verify.

  2. I tried to solve this by editing the response within the Developer Tools. I haven't yet figured out how to make this work, but may head back to it at some point.

SOLUTION & PROCESS

1ST WAY:

  1. Go to console

  2. Inspecting the variables

  3. Slow down the elves by changing their x and y velocity

  4. Get to the 75 points

*Note: I knew I hadn’t done anything with the JSON tokens, though, and figured there must be a second way.

2ND WAY:

  1. Researched on the discord channel

  2. Found a youtube video

  3. Used ChatGPT to find out how to use Burp Suite to modify responses

  4. I got up to the point where I would’ve been able to edit the response and send it, but couldn’t do so without a paid version of Burp Suite.

3RD WAY:

  1. Go to developer tools on chrome

  2. Go to response and set it up so it can be edited

  3. Save & apply changes

* I haven’t yet figured out this last step. But, having already found other ways to accomplish this task, I paused and decided to retry it some other time with a fresh mind.


Example Prompts:

  • How do I edit a response in burpsuite?

  • Is there a way to edit responses in the free version? or without burpsuite?

Example Prompts:

  • Is there a way to edit a response in chrome using developer tools?

  • I'm trying to follow method 1. For some reason, when I choose "override content" nothing is happening.

Last updated