[Faith Connors]

What are those variable _0x6ffd and how does the function spoiler work ?

It's not really important to the solution at all, basically just prints the line.
Dunno why it had to be obfuscated lmao, maybe to try and throw people off?

[redlightrouter]

It's not really important to the solution at all, basically just prints the line.
Dunno why it had to be obfuscated lmao, maybe to try and throw people off?

I actually did it for the people who didn't want to see spoilers or hints while watching the source code :))

---

Pretty sure I have a solution, will update in a bit.
Turns out I'm on Chrome Canary and they have all kinds of beta nightly shit for anti-xss going on and it's being a real nazi with me.
Firefox seems to let some stuff go through and a lot of the stuff I try /seems/ to work but I just don't get the alert.

EDIT: Now Firefox is letting my request go through but removing my code zzzz

EDIT2: I HAVE A WITNESS TO PROVE IM NOT A 100% RETARD
https://i.gyazo.com/b51894698b25163110dc...176aa4.png

I HAD THE SOLUTION BEFORE BUT RAN INTO SOME PROBLEMS AND IM ONLY ABOUT 10-15% RETARDED

Haha nice! Mind sending me the vector?

---

Another hint and a pretty much a spoiler:
Spoiler (Click to View)
Imagine a guard on an airport that doesn't want H2o to be smuggled. The only thing he is checking for is H2o. So people with h2 can pass, people with o can pass, but once someone with H2o tries to get on the plane he gets denied. So if there's someone smart enough to think 'hey, let me bring h2 and o, and once I arrive in Columbia then I will make it H2o.' You pretty much get the same result, right?

This is the final hint since this is also a pretty big spoiler.

Succes 🤝

First attempt. (Kinda not legit method)
https://gyazo.com/ff9cb8c422422001cf3ae6e60310f52f

Update#2

Pretty darn close
https://gyazo.com/66473a6385f016ea30c9fa61d4204f4c

Just a matter of removing some '"' ?

Not sure how that didn't trigger the filter. Mind sending your steps that you did in a pm

---

NOTE: Some of you managed to get an alert box by a hex vector. That's patched.

[ｋａ＄ｈ]

[redlightrouter]

Nice! Don't forget to pm me your vector :)

[ｋａ＄ｈ]

Nice! Don't forget to pm me your vector :)

Just PMed you my vector now

[redlightrouter]

Just PMed you my vector now

Thanks, I tried to patch that vector. Can you confirm that?

[VAP3]

Cant post links so I can show proof...

[Faith Connors]

Cant post links so I can show proof...

Take off the http at the front or put spaces in it.
And don't put the url of the site as it will contain your vector, just a screenshot is fine.

[Maxie]

Cba to post pic, but nice challenge, had me a bit amused for a while! Probably vulnerable to more than one vector aswell.

[B14ck_M4g1k]

Quite easy and fun! would love to see more.

Can't post images yet so here is the link

(http)://imgur(.)com/a/Y2qpo

remove the ()

- B14cK_M4g1K 🤝

[๖ۣۜXe]

Thanks, I tried to patch that vector. Can you confirm that?

What do you mean you tried to patch it? Are you just patching people's vectors they used? How is that fair if you are making it harder & harder lol ?

[Faith Connors]

What do you mean you tried to patch it? Are you just patching people's vectors they used? How is that fair if you are making it harder & harder lol ?

He didn't patch my vector lol

[Hoodie+]

http://image.prntscr.com/image/a6661e68c...5b9a3a.png

Easy challenge.

My payload:
Spoiler (Click to View)

*removed*

[redlightrouter]

What do you mean you tried to patch it? Are you just patching people's vectors they used? How is that fair if you are making it harder & harder lol ?

Because I want the vector to be identical as the one I had in mind. Faith's vector was good and so is hoodie's vector.

---

http://image.prntscr.com/image/a6661e68c...5b9a3a.png

Easy challenge.

My payload:
Spoiler (Click to View)

Nice! That's what I like to see. Mind removing your vector though? ^^

[Andrew Carnegie]

prntscr dot com/dhud0j easy did it again :P