Nmap Output:

 

 

The login page welcomes us on the home page.

 

 

When we look at the source code, we see the guest user information.

 

 

When we log in as a guest, the url attracts attention.

 

 

IIf we replace the guest value with admin, we get the flag.