Gotta Crack 'em All

solution.md|7 lines(757 B)

Scroll down to the end of hashes.txt to find the crackstation.net link (other rainbow table lookup tools can be used but this is what was used for the question)
Try all the hashes placed in hashes.txt in crackstation.net
Choose the correct algorithm as well as the plaintext password to input into the html (Password no. 4 - Giovanni - md5)
Go to repo, read the readme and on inspection of existing files find 3 potential flags - DEPLOY KEY, MASTER KEY and a morse code
When they reach notes.txt in docs, they will see a hint placed there telling them they are TOO late and that the real flag would have f*cked their brains
Go to commit history and see "Secured environment" commit where they find the brainfuck encoded flag in .env