SwampCTF 2025: Maybe Happy Ending GPT

author: @yoshixi

Challenge Info:

Category: Web, LLM

Challenge Resources

Web URL

Download

Solution

Search for references of flag

We see that there is a hint here, and that it is using eval()

It is reading the LLM’s response and then evaluating it and returning the eval’s output as a response

muddywater