Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
site.json is generated from the FLAG injected at startup. Follow ordered link-graph comments and join Base64 fragments to recover the flag.
Inspect site.json and identify the target record
follow ordered link-graph comments and join Base64 fragments
Verify that the reconstructed value has FLAG{...} format