BITSCTF

1) BOTBOT
- First i view source of website and i see

- "Nothing to see here. Maybe try looking up seo .txt"  so i think about file robots.txt

"fl4g"=> i has a flag BITCTF{take_a_look_at_googles_robots_txt}
2)BAT MAN VS JOKER:
_ This challenge is about SQLI. I use Union and it's work

- So go and get flag first and get name of the database(), and it's hack then i get all name table of database() and i get a table name Joker

- Finally i get column name and flag :v

 

The FLAG:

BITSCTF{wh4t_d03snt_k1ll_y0u_s1mply_m4k3s_y0u_str4ng3r!}