HackCommunity XSS challenge - Printable Version

HackCommunity XSS challenge - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: HackCommunity XSS challenge (/Thread-HackCommunity-XSS-challenge)

Pages: 1 2 3 4 5

RE: HackCommunity XSS challenge - killerOfCode - 09-27-2012

(09-26-2012, 09:10 PM)1234hotmaster Wrote: Well looking at JS i just noticed there is the String.fromCharCode function XD

I feel like I'm forgetting all of these... I still remember my old XSS tunnel setup

You're using IE? *facepalm*

RE: HackCommunity XSS challenge - Raz0r - 09-27-2012

(09-27-2012, 04:26 AM)killerOfCode Wrote:
(09-26-2012, 09:10 PM)1234hotmaster Wrote: Well looking at JS i just noticed there is the String.fromCharCode function XD

I feel like I'm forgetting all of these... I still remember my old XSS tunnel setup

You're using IE? *facepalm*

Some browsers don't show the XSS alert... Internet Explorer shows it about 99% of the time sir.

RE: HackCommunity XSS challenge - Shining White - 09-27-2012

Fuck Level 2 , i wonder why i can't do that , Tongue

, realize it was my goddamn browsers Security Addons Tongue

RE: HackCommunity XSS challenge - 1llusion - 09-27-2012

(09-27-2012, 08:25 AM)Shining White Wrote: fudge Level 2 , i wonder why i can't do that , , realize it was my goddamn browsers Security Addons

I was seriously worried the challenge will last only a day, but seeing it took 1 day only to solve 2 challenges xD

I'll be slowly making guides for every solved challenge. Starting with a guide: choosing the right browser Tongue

RE: HackCommunity XSS challenge - Shining White - 09-27-2012

(09-27-2012, 09:06 AM)1llusion Wrote:
(09-27-2012, 08:25 AM)Shining White Wrote: fudge Level 2 , i wonder why i can't do that , , realize it was my goddamn browsers Security Addons

I was seriously worried the challenge will last only a day, but seeing it took 1 day only to solve 2 challenges xD

I'll be slowly making guides for every solved challenge. Starting with a guide: choosing the right browser

yeah that will helpful :lol:

Level : 3

Spoiler:

Image :

Code : </TITLE><SCRIPT>alert("Shining White from HackCommunity");</SCRIPT>

PS : Windows never will help to the people who like to Pentest Tongue

and of course the Application it is wasting the time with these XSS's coz Challenge developer know the XSS better

RE: HackCommunity XSS challenge - Shining White - 09-27-2012

Level : 4

Spoiler:

Image :

code : <h1>Shining White from HackCommunity</h1>

Illusion Says level 5 is Hard Biggrin

lets see

RE: HackCommunity XSS challenge - bluedog.tar.gz - 09-27-2012

(09-27-2012, 10:33 AM)Shining White Wrote: Level : 4

Spoiler:

Image :

code : <h1>Shining White from HackCommunity</h1>

Illusion Says level 5 is Hard lets see

u r cheating, owasp => CTRL - C + CTRL - V Tongue

RE: HackCommunity XSS challenge - 1llusion - 09-27-2012

(09-27-2012, 10:33 AM)Shining White Wrote: Level : 4

Spoiler:

Image :

code : <h1>Shining White from HackCommunity</h1>

Illusion Says level 5 is Hard lets see

I don't agree with this way of solving challenge 4. I'm sorry but get us an alert box Tongue

HTML injection by itself doesn't do much.

RE: HackCommunity XSS challenge - Shining White - 09-27-2012

(09-27-2012, 10:37 AM)bluedog.tar.gz Wrote:
(09-27-2012, 10:33 AM)Shining White Wrote: Level : 4

Spoiler:

Image :

code : <h1>Shining White from HackCommunity</h1>

Illusion Says level 5 is Hard lets see

u r cheating, owasp => CTRL - C + CTRL - V

Lulz , Theres no such word "Cheat" exicist on the World of Hax Tongue

and the OWASP Mantra can what ? using XSS me not working coz of Illusion had
fix the Injecting Code System ,
can you hax those with Mantra Addon or any plugin , i yes i wonder if you can teach me or suggest me the Addon , plugin Tongue

and the Illusion , you mean it can't inject via HTML ? in level 4 ,
what about the level 3 then ?

RE: HackCommunity XSS challenge - 1llusion - 09-27-2012

(09-27-2012, 10:59 AM)Shining White Wrote:
(09-27-2012, 10:37 AM)bluedog.tar.gz Wrote:
(09-27-2012, 10:33 AM)Shining White Wrote: Level : 4

Spoiler:

Image :

code : <h1>Shining White from HackCommunity</h1>

Illusion Says level 5 is Hard lets see

u r cheating, owasp => CTRL - C + CTRL - V

Lulz , Theres no such word "Cheat" exicist on the World of Hax
and the OWASP Mantra can what ? using XSS me not working coz of Illusion had
fix the Injecting Code System ,
can you hax those with Mantra Addon or any plugin , i yes i wonder if you can teach me or suggest me the Addon , plugin

and the Illusion , you mean it can't inject via HTML ? in level 4 ,
what about the level 3 then ?

You can inject HTML, however, I'd like to see an alert box rather than text. The level 4 is about javascript syntax so just putting

Code:
<h1>Shining White from HackCommunity</h1>

kinda ruins the point of that challenge Smile

I'll add this to the rules Tongue

EDIT: Added 6th challenge
EDIT2: Added 7th challenge