Start Here

• launch the server

• main page - get the flag

• go to admin subdomain of given scope of attack - get another flag