Rating:
1. Fuzz the website and find sitemap.xml2. Fetch the flag and base64 + base58 it

I don't remember