Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
artifact-manifest.json is generated from the FLAG injected at startup. Verify each data SHA-256, XOR-decrypt with SHA-256(name), and join to recover the flag.
Inspect artifact-manifest.json and identify the target record
verify each data SHA-256, XOR-decrypt with SHA-256(name), and join
Verify that the reconstructed value has FLAG{...} format