Weekly — Locked

Scenario

Stage two remains locked until stage one is cleared, then expects a secret request header. The key material is leaked somewhere in the prior stage output. Send the correct header to retrieve the stage two flag.

Your approach

1. Complete stage one so stage two becomes reachable.
2. Find the header name and key in comments or prior responses.
3. Request stage two with that custom header attached.
4. Copy the stage two flag from the response.
5. Submit that flag.