Rating:

# Finding server information

Once logged in go to one of the videos.

In the source the image is embeded as base64 meaning the files are stored client-side.

Visit `/watch/app.py`.

Look in the source again and the flag is there.

**ractf{qu3ry5tr1ng_m4n1pul4ti0n}**

Original writeup (https://github.com/crypt0n1te/Write-Ups/blob/master/ractf-2020/web/Finding_server_information.md).