Hello Team Description In the continuous series of 12 days, twelve flags were hidden inside Hackyholidays site - hackyholidays.h1ctf.com in which once we get all the flags, grinch can be stopped. This write-up will describe solving all the 12 days challenges. Step To Reproduce It all started when hackerone announced the hackyholidays CTF. {F1138874} So, every day there will be one CTF added for the next 12 days so that it can end right before Christmas and we have to stop grinch by ruining his plans by getting all the flags and it'll save the holidays. Day 1 - CTF level 1 On the first day, CTF level 1 launched. While I was looking into the site, there were no additional functionalities added and no paths, so the first thing which came to my mind before path brute-force and other methods is to always look on /robots.txt file where it can reveal some information. When I opened https://hackyholidays.h1ctf.com/robots.txt, and thus, in the response, I got the first flag. {F1138876} Flag 1 - flag{48104912-28b0-494a-9995-a203d1e261e7} Day 2 - CTF level 2 In the first day, I've already discovered the path from https://hackyholidays.h1ctf.com/robots.txt. txt User-agent: * Disallow: /s3cr3t-ar3a So, the path /s3cr3t-ar3a became the second-day challenge, and I visited the page https://hackyholidays.h1ctf.com/s3cr3t-ar3a, {F1138880} There was a message on the page which says - page moved. I thought the first thing to look for any hidden paths is to check the page using...