Full writeup: https://github.com/p4-team/ctf/tree/master/2017-08-25-hackit/web150
tl;dr: egghunt to find fake jquery.js file, then read the code and get the flag by
```python"".join([chr(c-i) for i,c in enumerate([70,70,71,79,86,74,71,83,80,74,77,86,81,95])])```