No writeups match your filter.
Password and flag hardcoded in client-side JavaScript — just read the source.