Let's log in to AlpacaHack again today...
Beginner Hint 1: About the Admin Bot
- In this challenge, an Admin Bot is provided separately from the web application itself.
- The Admin Bot opens a specified URL in Headless Chrome and leaks the flag in a specific way. Read the code to understand when and how the flag is leaked.
- You need to host a web page that is accessible to the bot. You can use your own server or existing hosting services, but we have provided RequestBin to make hosting web pages for CTF purposes easier.
- If you're unfamiliar with how the Admin Bot works, we recommend solving Fushigi Crawler and reading its writeup first.
Beginner Hint 2: About RequestBin
- RequestBin is a service for easily hosting web pages for CTF purposes.
- It is a tool to help you solve challenges, not the target server itself.
- You can find instructions on how to use it here.