Jailbreak

A pretty neat site

When you first arrive on the site you are greeted with Vault Boy (the best mascot ever). You can check your current level, what special powers you have and your perks. Neither of those provide anything worthwhile. Navigating to the other pages leads to nothing as well.

Something interesting!

While the INV, DATA, MAP, and RADIO pages draw blanks the ROM page provides us with what looks to be a terminal, with some firmware update information in XML.

Time to go a searching for a payload. I used the following XML External Entity (XXE) Injection Payload List.

The payload

Tossing the payload below and hitting the submit button might get you the flag...

No AI was harmed in the making of this post that I know of atleast 😀