Pthc Top Site ^hot^ ⏰

The final score S(i,u) for item i and user u is:

# 4️⃣ Grab the JavaScript (to see debug param hint) wget -qO- https://topsite.pthc.xyz/static/js/app.js | grep debug Pthc Top Site

[ \hatS(i,u) = w_u^\top \cdot \phi(i) ]

A quick scan with a modest wordlist turned up the /debug endpoint, which was the key to the flag. The final score S(i,u) for item i and