Start small.
Think like a defender.

1. Right-click the page and choose View Page Source, or press Ctrl + U.
2. Use Ctrl + F to search for flag.
3. Look through comments and linked text files too. Comments are invisible in the rendered page, but visible in the source. Open the plain-text hint.
4. Submit the value that starts with WVSU{.

Tip: developers leave comments for themselves, and sometimes a flag is hiding there too.

1. pwd prints your current folder so you know where you are.
2. ls lists the files in that folder. Look for a filename that deserves a closer look.
3. cat notes.txt prints a text file directly in the terminal.
4. Read the note, then submit the flag it reveals.

Tip: command-line tools are small, composable, and excellent at revealing plain-text clues.

1. Base64 often uses letters, numbers, +, /, and ending = padding.
2. Copy the string into a Base64 decoder, or use echo '...' | base64 -d on Linux.
3. Read the decoded phrase. It gives you a short Caesar cipher to finish.
4. Shift each letter three places backward to reveal the flag.

Tip: Base64 changes how data is represented; it does not make the data secret.