TJCTF2026-web/treasure-hunt

Checking the source code reveals a hidden <p> tag:

Sending a POST request to the form makes the server set the silver_coffer cookie:

Check /robots.txt:

Flag

tjctf{s1lv3r_and_g0ld}