Kitty

from sourse code of http://45.33.123.243:5020 we got this one: <script src="/static/script.js"></script>
with this path http://45.33.123.243:5020/static/script.js we got username": username, and "password": password
after login execute 'cat flag.txt' to hunt the flag.