login

https://play.picoctf.org/practice/challenge/200?originalEvent=67&page=1

• [[inspect]], source, and go to the index.js file

• there you can see the js comparing usernames and passwords, checking if they are right in the js

• we see a cG..., a sign of base64

• putting that into [[CyberChef]] we get the flag