I know that I have to insert a password that will be translated (together with pas_val) into a string for p_val which will look something like to transfer me to the winning-page.
However there is 2 (maybe 1 if my prediction is right) things I can't figure out:
-How exactly does p_val look like in the end? Do I get an information about that in any place?
-Even if I know how p_val looks like, do I need to completely reverse engineer the whole thing to find out what password to use? Or will it stand plain obvious in the p_val string (like the url I'll have to go to, to get this challenge marked as solved)
p.s.: I hope someone still reads this as the whole forum looks kinda dead
Not quite dead, but kind of comatose I guess ... You are almost there. Reverse engineering is actually quite easy if you play with the code, and you have got enough info to start with that.
By the way, better edit your post. It is very explicit about the solution ... (helped me solve the challenge a moment ago, because I forgot a crucial stupid thing in p_val)