FlagScript

This was pitched as an Easy difficulty Web challenge. You are directed to a website which features a Matrix style banner.

Examining the source shows that the file flagscript.js is invoked.
Adding this file to the URL in the browser allows us to view the JavaScript in the browser.
Within the code, several variables are defined, including one called flag.

flag=a[_0x26ff06(0x16f)](fv,c,d,e,f,g,bg,i,j,k,xx,m,n,o,jj,q,r,s,kk,u,ab)

The letters in “flag” correspond with previously declared variables.
Substituting the variables within the () brackets in “flag” gives:

BCTF{n0t_a_nice_code}

This is not quite the correct flag; substituting the value of variable a in front of the [] brackets (and ignoring the content of the []) gives:

SBCTF{n0t_a_nice_code}