Overview
We are given the website notheme.rf.gd and need to extract a hidden code.
Reconnaissance
We login using standard credentials admin / admin.
Exploitation Strategy
In the source page of the admin panel, we discover an encoded string: Y:7OHA:.EI6BVR65-CL95OJDQL6TTA. Decoding it using Base45 followed by Base92 yields the flag.
Solution Code
import base45
import base92 # or alternative decoding library/tool
encoded = "Y:7OHA:.EI6BVR65-CL95OJDQL6TTA"
# Decode sequence: Base45 -> Base92 -> STG{W33L_TRY_1T}Flag
STG{W33L_TRY_1T}