Overview
The page contains 250 flags and hints that we should use rockyou.txt to guess the correct password to unlock the real flag.
Reconnaissance
Analyzing the page, there is a prompt or input requesting a password to highlight the correct flag.
Exploitation Strategy
Although we could run a brute-force script using words in rockyou.txt, the actual password for the prompt is literally the string \"rockyou.txt\" itself.
Solution Code
Submit the literal string 'rockyou.txt' as the password.Flag
STG{kilo_04nf_62}