This application emails the flag to level19@websec.fr, in case it was forgotten. Since we don't discriminate against Tor users, everyone gets a clownflare-style captcha (to protect us against hackers). Here are the sources for the index, the captcha, the anti-csrf, and the prng.