Full writeup: https://github.com/p4-team/ctf/tree/master/2017-08-25-hackit/web150

tl;dr: egghunt to find fake jquery.js file, then read the code and get the flag by

```python
"".join([chr(c-i) for i,c in enumerate([70,70,71,79,86,74,71,83,80,74,77,86,81,95])])
```

Original writeup (https://github.com/p4-team/ctf/tree/master/2017-08-25-hackit/web150).