This seems like an old post but I tried doing some javascript injections with one of the basic missions. Nothing worked. I would write out javascript:alert(document.forms[0].to.value); in the url and nothing; every time. I think now being 2019 vs 2012 when the last post was, javascript seems to...
I am decrypting by hand and I am starting to see a pattern. Now I run into '?" and I dont see any solutions by hand or on the ASCII table. Am I missing something here?
** edit: Okay i got it. Very delightful. So far I've done 1-6 and these last 4 are a challenge, but enjoyable.