Rating:

## Solution

Based on the prompt in the _ZIP ANALYZER_ page and the name __slippery situation__, it is obviously a reference to the recent [Zip Slip Vulnerability](https://snyk.io/research/zip-slip-vulnerability).

We go to the comment ``

We get the admin panel where we see another comment in the HTML.

```

```

Since the zip in decompressed in the `/files/` directory, we create a zip adds a file `../admin/key.text`. This text file does not have to contain anything to work. It's probably a bug.

```bash
$ zip ../admin/key.txt
```

The rest is straightforeward, you go back to the admin panel the flag is practically yours.

Original writeup (https://github.com/pberba/ctf-solutions/tree/master/20180907_nox/slippery_situation).