We created a portal to check your flag. Make sure you got the right flag!

http://103.5.112.91:4000

When we visit the website we encounter a prompt that asks for the flag. If we look at the network traffic, we can notice that it loads main.js first. Let’s check it.

Even though it looks messy at first. We are only interested in this code snippet.

It looks the prompt is create here with a parameter of _0x5125 call, so we assume it returns a string. The prompt stores our input in _0x52b070 and compares it to another call of _0x5125. This means we were right about our assumption. Now, we can either use our browser’s debugger or call the function from developer console to see what it returns.

Let’s call it from console.

And we got the flag xiomara{[email protected][email protected][email protected]@[email protected]}.