C:\CTF\K17\EDWALK.EXE _□X

EDWALK

web

Challenge

A web app's minified production bundle claims to gate the flag behind some client-side check.

Solution

The production build still ships its JavaScript source map. Loading it in the browser devtools un-minifies the bundle back to close to its original source, and getFlag() is sitting right there in the deobfuscated code — no need to actually satisfy whatever check it pretends to gate behind, since the function (or the value it returns) is just readable.