Kitty
from sourse code of http://45.33.123.243:5020 we got this one: <script src="/static/script.js"></script>with this path http://45.33.123.243:5020/static/script.js we got username": username, and "password": passwordafter login execute 'cat flag.txt' to hunt the flag.