VulnHub - GameOver vm - Hackademic_Challenges - challenge 006

After browsing the site and running Nikto and Dirbuster in an attempt to find something 'interesting', I checked the code.
The following script stood out:
<script language="JavaScript">
document.write(unescape("%3C%68%74%6D%6C%20%78%6D%6C%6E%73%3A%76%3 --snipped - "))
</script>

Trying to reverse the script with Unicode, had me check several websites.

http://www.tareeinternet.com/scripts/unescape.html

- the above unescape decoder worked
- I also included everything in the <script> </script> tags
- and looked in the resulting code slowly for anything that would lead me to my next clue.
- you can speed up the process by looking for for 'pass'
- and there it was:

function GetPassInfo(){
        if (document.forms[0].PassPhrase.value == 'easyyyyyyy!')
                 location.href="index.php?Result=easyyyyyyy!";
             else
                 alert("Wrong Code...!!");
    }

- typed that in and...