Uploaded by organizer - writeup created by challenge developer Sam Itman
## Solution Steps* View page source code via CTRL+U or Inspect Element and find the API query being made* As the hint "hints" at, there is a FETCH method being called to a specific endpoint called "test"* Note that the authorization header is embedded in the source code in clear text * Copy the API query along with the authorization header into the DevTools console* Replace the endpoint 'test' with 'flag'* Run the query directly in Chrome DevTools console* You can also perform this query in a terminal application or an API platform like Postman* Flag: `jctf{*MAJ0R-K3Y-AL3RT*}`