**Step 1**

Use the Network Tab and see for the scripts being loaded, there we see a suspicious script named as "custom.js"

[https://imgur.com/QzcXC8B](https://imgur.com/QzcXC8B)

**Step 2**

On analysing the code inside the script, we see a password field as "if(u == "admin" && p=== ....)" with URIComponent

[https://imgur.com/RKaPGp1](https://imgur.com/RKaPGp1)

**Step 3**

Use the Developer tab to decode the URIComponent

[https://imgur.com/R0xgQy4](https://imgur.com/R0xgQy4)

**Step 4**

Viola you have your flag

[https://imgur.com/xPB2yos](https://imgur.com/xPB2yos)