This challenge Flag is search from password hash. So I used store passwod hash list site. This flag is "notsecure"

Original writeup (https://312k.github.io/312k-blog/post/post6/brixelctf-312k-eng/#flawed).