Tags: browser pwn 

Rating: 5.0

The challenge author forgot to strip the globals; therefore, it is possible to just read out the flag:

```javascript
let a = read('/flag');
print(a);
```

flag: `F#{84e3f3e8124f5753e61b7f7d543bf9bb3410645a}`

h4tt0r1March 24, 2020, 11:09 p.m.

Oh fuck, kill me pls