Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
secret.zip is a ZIP encrypted with a weak password and contains flag.txt. Use the shipped wordlist.txt and Python's stdlib zipfile to brute-force the password and extract flag.txt.
Try each candidate with zipfile.ZipFile(...).read("flag.txt", pwd=w.encode())
A correct password returns data; a wrong one raises -- skip it with try-except
One word in wordlist.txt is the password