We were given a blank page.

But if we look at http headers, we can see that we have masked flag in them.

All that we need – find masked characters of flag.

Continue reading