The author participated in their first CTF challenge called Winja CTF | Nullcon Goa 2025.In the first challenge, the author used prompt injection to make the chatbot say the phrase 'Accio Flag' and successfully retrieved the flag.In the second challenge, the author used Base64 encoding to trick a more advanced chatbot and retrieve the flag.The author also attempted a web application security challenge and found the flag by performing a gobuster directory scan.