🐒 Mr.Monkey Challenge – Web CTF

A Flask-based web challenge focused on logic flaws, ID-based access control, and unexpected application behavior.

At first glance, the application looks simple.
With a bit of curiosity, things start to behave… strangely 🐵

---

🎯 Objective

Your goal is to analyze the web application and discover the hidden flag by:

• Interacting with available endpoints
• Understanding how user IDs are processed
• Exploiting logical inconsistencies

No brute-force attacks required.
No SQL injection.
Only logic.

---

🚀 Run Locally

pip install flask
python app.py

🚀 Docker

docker build -t my-flask-app .
docker run -d --name my-flask-container -p 5003:5003 --restart unless-stopped my-flask-app