Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
data.txt is JSON containing many users. Find the single user whose role is admin, active is true, and email contains @secret.com, then read the flag in that record.
Load with the json module and iterate the users array
Find the user meeting all three conditions (role/active/email)
The flag field of that user is the flag