miscProeasy

Prompt Easy

BlueHens CTF 2026

Task: a Flask chatbot challenge hides the flag in its system prompt behind a simple CAPTCHA gate and basic output guardrails. Solution: automate CAPTCHA solving, force partial prompt disclosure, then request the prompt in ASCII decimal form so the model leaks the protected text through a transformed representation.

$ ls tags/ techniques/
flaskwerkzeugascii_encodingcaptchallmprompt_injectionsystem_promptguardrail_bypass
captcha_automationsystem_prompt_exfiltrationprompt_injectiontransformed_output_bypassascii_decimal_decoding
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups