Solved! 
At first I found it difficult, but it is easier than I thought, as several have said the slides (OWASP) are the key, I had to read it several times very carefully (since my native language is not English), and in the end a little adjustment to get the flag, I honestly found it more difficult I Know M4gik than this challenge