Based on our hints in the first flag, it gives us the endpoint
+-----------------------------------------------------------------------+
| PRJBLK{1/6:_fIR$t_0f_m@nY_fL@gz._wHEr3_W1lL_Y0u_pUT_Th3M_@1l?} |
| |
| Hint: /api/listing.php?key=VGhpc0lzVGhlVmVyeVZlcnlWZXJ5U2VjcmV0S2V5 |
+-----------------------------------------------------------------------+
After browsing to the endpoint, there were a list of endpoints within the /app directory.
Within this listing, we also found our 2nd flag 🏁
<aside> 💡
PRJBLK{2/6:_oH_b0y,_Wh@t_d0_W3_H@vE_hEr3}
</aside>
Next