Operation Rocket Breach

1. SQL Injection In the username field, type admin'-- and leave the password as anything. This bypasses the login and grants access to the admin dashboard.

2. View Page Source On the dashboard, right-click and select View Page Source (or press Ctrl+U).

3. Find the chunks Search for chunk in the source. You'll find 3 HTML comments scattered across different sections of the page, each containing a piece of the encoded flag.

   (in the stats section) (in the log table) (in the notices section)

4. Concatenate in order Join the pieces by their chunk number, not the order they appear in the source:

chunk_1 + chunk_2 + chunk_3

final encoded flag: aGFja2Vtb257czB1cmMzX2MwZDNfc24wMHAzcn0=

5. Decode Paste the combined string into CyberChef and use Magic / Auto Bake. It will detect ROT13 followed by Base64 and decode the flag automatically.