There was one image attached with this challenge, admin_flag.png
.
The flag designer provides options to customize the flag.
The first step would be to recreate the admin flag, however this isn't possible as the logo in the center is not available out of the 14 available overlays.
One thing I tend to do with web challenges is check the source code of the website. Checking the source code of this website revealed a link to the flag's image.
<img data-v-5534683e src="/flagdesigner/api/flag/7/0/9/5/2/4/1/1.svg" alt="Flag">
After some trial and error, I realized that each of the numbers represented either a color or an overlay option of some part of the flag.
- flag style - 7 (three stripes)
- overlay #1 - 0 (currently set to no overlay)
- overlay #2 - 9 (the beige dot on the side)
- flag color #1 - 5 (the top stripe)
- flag color #2 - 2 (the middle stripe)
- flag color #3 - 4 (bottom stripe)
- overlay #1 color - 1 (set to beige)
- overlay #2 color - 1 (set to beige)
As there were only 14 overlay options in the flag designer, changing the part of the URL for overlay #1 to 15 for fun actually revealed the admin flag logo! Changing the color for the overlay to black (3) revealed the flag required to solve the challenge.
Flag: CTF{YOU-HAZ-ADMIN-FLAG}
More writeups from Hacky Holidays: Space Race