Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
Start the stock API on localhost:9102, find the transaction with the largest sell_price - buy_price across all symbols, and POST its id to /api/check. The correct response returns the startup-injected FLAG.
Start python3 server.py first
Fetch /api/stocks and every symbol history
POST the highest-profit id as JSON to /api/check