EvilBabyKalmarCTF

Last year we had you play a CTF inside a CTF - but have you ever tried being the organiser for a CTF within a CTF?

We heard that one of our players is using a CTFd scraper to automatically gather challenge information from our instances every 30 seconds to get the latest challenges as soon as they drop. Smart right?! Or was there a security reason that John Hammond made changes to it?

The admin credentials for the CTFd instance are: admin:i_solemnly_swear_that_i_am_up_to_no_good.

Note: this challenge contains two flags. One for the web challenge RootBabyKalmarCTF and one for the misc challenge EvilBabyKalmarCTF.