Rating:

1. Fuzz the website and find sitemap.xml
2. Fetch the flag and base64 + base58 it

![Screenshot](ss1.png)
![Screenshot](ss2.png)

Original writeup (https://github.com/TrollzorFTW/writeups/tree/master/bsidesbos/warmups/wheresthebody).