Try chatting with tech support about getting a flag. There is a very easy XSS in the support chat, but the problem is, the XSS is on the wrong domain. So we can't easily grab the flag.
Challenge: https://capturetheflag.withgoogle.com/challenges/web-typeselfsub
Tech Support: https://typeselfsub.web.ctfcompetition.com/