This challenge Flag is search from password hash.
So I used store passwod hash list site.
This flag is "notsecure"

Original writeup (https://312k.github.io/312k-blog/post/post6/brixelctf-312k-eng/#flawed).