tl;dr.See robots.txt for hidden directory, authentication in javascript with Unicorn for emulating the shellcode. Reverse engineering the shellcode, for getting the username and password. Get the flag.