I had a look at the Election Day challenge.
Since the &
and #
symbols are not blocked by the WAF I did some digging.
The string “62d784” can be represented using only the # and & symbols by converting the string to its hexadecimal equivalent and then using the hexadecimal characters to represent the string:
“62d784” in hexadecimal is “0x62 0x64 0x37 0x38 0x34”
So the representation using only # and & symbols would be:
bd784
Sadly, it did not work, but I know I am very close. Any hints?