93 words
1 minutes
UofTCTF 2025
WEBThis is the Web category of the ctf
Scavenger Hunt
Challenger Description :

This challenge was just "snooping"
Flag Retrieval Process:
The first part of the flag was found in the HTML source code. It was hidden within a comment.
![]()
Part 2 : i found the second in the Header

Part 3 : i found in cookies.

Part 4 : Found in robots.txt 
Part 5 : Found in styles.css 
Part 6 : Admin panel accessible (find in robots.txt : hidden_pannel…) after changing cookie value (guest) to admin. 
Final part (6) : Clue from previous parts: In app.min.js. 
and VOILA : uoftctf{ju57_k33p_c4lm_4nd_1n5p3c7_411_7h3_4pp5_50urc3_c0d3!!}

