1. Fuzz the website and find sitemap.xml
2. Fetch the flag and base64 + base58 it


Original writeup (https://github.com/TrollzorFTW/writeups/tree/master/bsidesbos/warmups/wheresthebody).