# LACTF – Discord L34K * **Category:** Misc * **Author:** burturt ## Challenge > My friend sent me this message link that apparently links to a "flag", but discord says "You don't have access to this link"! They did mention something about them being able to embed a list of online users on their own website, and sent me this image. Can you figure out how to join the server? ## Solution The challenge contains the link to a Discord message to which we don't have access. Furthermore, we get the following image: ![](https://i.imgur.com/6O9MEAB.png) After googling `discord widget`, I found [this](https://discord.com/blog/add-the-discord-widget-to-your-site/#:~:text=You%20can%20get%20the%20widget,to%20see%20in%20the%20widget.) tutorial about adding the Discord widget to your website. Visiting `Server settings` > `Widget` on a Discord server you own, you can find a premade widget. ```html <iframe src="https://discord.com/widget?id=<YOUR SERVER ID>&theme=dark" width="350" height="500" allowtransparency="true" frameborder="0" sandbox="allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts"></iframe> ``` To see the widget of another Discord server, we just have to change the server ID in the url above. The link to the message has the following format: ``` https://discord.com/channels/<SERVER ID>/<CHANNEL ID>/<MESSAGE ID> ``` Since the message we are trying to find is located at `https://discord.com/channels/1060030874722259057/1060030875187822724/1060031064669700186`, we can generate an invite to the server by visiting `https://discord.com/widget?id=1060030874722259057` and clicking on `Join Discord`. ![](https://i.imgur.com/NKLh4WI.png) Once inside, we can read the flag: `lactf{D15C0rD_W1D6375_134K_1NV1735}`