Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
coverage-queue.jsonl is generated from the FLAG injected at startup. Order Base64 inputs by offset and XOR-decrypt with SHA-256(edge-0x5e7) to recover the flag.
Inspect coverage-queue.jsonl and identify the target record
order Base64 inputs by offset and XOR-decrypt with SHA-256(edge-0x5e7)
Verify that the reconstructed value has FLAG{...} format