Overview
Follow hints on the rules page to locate hidden directory paths restricted to web crawlers.
Reconnaissance
Inspecting the HTML source of /rules reveals a comment: <!-- Don't go to the place where bots are not allowed -->.
Exploitation Strategy
Visit /robots.txt to find hidden directory path and fetch flag.
Solution Code
curl https://<challenge-url>/rules
curl https://<challenge-url>/robots.txt
curl https://<challenge-url>/<hidden-path>
# Flag: hwj{b0ts_w0nt_l00k_h3r3}Flag
hwj{b0ts_w0nt_l00k_h3r3}