Czechstreets 139 Jun 2026

In short: that lets us read arbitrary street objects, including the hidden one with id = 139 .

No obvious clues, but the form submits a GET request to /search?q=… . czechstreets 139

| Item | Description | |------|-------------| | | czechstreets – 139 | | Provided | A public URL: http://139.czechstreets.ctf (the “139” sub‑domain is part of the challenge name). The landing page shows a simple map of Prague with numbered streets and a tiny search box that says “Find the hidden street”. | | Goal | Retrieve the flag, which is hidden somewhere on the site. | | Flag format | czechstreets… | In short: that lets us read arbitrary street

The flag is clearly embedded in the JSON. czechstreets 139