+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Test your javascript skills | XSS challenge (/showthread.php?tid=5483982)
* - Faith Connors - Dec 6, 2016
(Dec 6, 2016 06:53 PM)Untraceable_Pro Wrote: What are those variable _0x6ffd and how does the function spoiler work ?
It's not really important to the solution at all, basically just prints the line.
Dunno why it had to be obfuscated lmao, maybe to try and throw people off?
* - redlightrouter - Dec 7, 2016
(Dec 6, 2016 07:02 PM)Faith Connors Wrote: It's not really important to the solution at all, basically just prints the line.
Dunno why it had to be obfuscated lmao, maybe to try and throw people off?
I actually did it for the people who didn't want to see spoilers or hints while watching the source code :))
(Dec 6, 2016 04:23 PM)Faith Connors Wrote: Pretty sure I have a solution, will update in a bit.
Turns out I'm on Chrome Canary and they have all kinds of beta nightly shit for anti-xss going on and it's being a real nazi with me.
Firefox seems to let some stuff go through and a lot of the stuff I try /seems/ to work but I just don't get the alert.
EDIT: Now Firefox is letting my request go through but removing my code zzzz
EDIT2: I HAVE A WITNESS TO PROVE IM NOT A 100% RETARD
https://i.gyazo.com/b51894698b25163110dc285974176aa4.png
I HAD THE SOLUTION BEFORE BUT RAN INTO SOME PROBLEMS AND IM ONLY ABOUT 10-15% RETARDED
Haha nice! Mind sending me the vector?
(Dec 6, 2016 03:41 PM)redlightrouter Wrote: Another hint and a pretty much a spoiler:
Spoiler (Click to View)
This is the final hint since this is also a pretty big spoiler.
Succes 🤝
(Dec 6, 2016 04:07 PM)Fộrcəd Wrote: First attempt. (Kinda not legit method)
https://gyazo.com/ff9cb8c422422001cf3ae6e60310f52f
Update#2
Pretty darn close
https://gyazo.com/66473a6385f016ea30c9fa61d4204f4c
Just a matter of removing some '"' ?
Not sure how that didn't trigger the filter. Mind sending your steps that you did in a pm
NOTE: Some of you managed to get an alert box by a hex vector. That's patched.
* - ｋａ＄ｈ - Dec 7, 2016
![[Image: 6xoXCSA.png]](https://i.imgur.com/6xoXCSA.png)
* - redlightrouter - Dec 7, 2016
(Dec 7, 2016 03:47 AM)Ka$h Wrote:
Nice! Don't forget to pm me your vector :)
* - ｋａ＄ｈ - Dec 7, 2016
(Dec 7, 2016 02:28 PM)redlightrouter Wrote: Nice! Don't forget to pm me your vector :)
Just PMed you my vector now
* - redlightrouter - Dec 8, 2016
(Dec 7, 2016 11:37 PM)Ka$h Wrote: Just PMed you my vector now
Thanks, I tried to patch that vector. Can you confirm that?
* - VAP3 - Dec 9, 2016
Cant post links so I can show proof...
* - Faith Connors - Dec 9, 2016
(Dec 9, 2016 12:43 PM)VAP3 Wrote: Cant post links so I can show proof...
Take off the http at the front or put spaces in it.
And don't put the url of the site as it will contain your vector, just a screenshot is fine.
* - Maxie - Dec 9, 2016
Cba to post pic, but nice challenge, had me a bit amused for a while! Probably vulnerable to more than one vector aswell.
* - B14ck_M4g1k - Dec 10, 2016
Quite easy and fun! would love to see more.
Can't post images yet so here is the link
(http)://imgur(.)com/a/Y2qpo
remove the ()
- B14cK_M4g1K 🤝
* - ๖ۣۜXe - Dec 10, 2016
(Dec 8, 2016 10:44 AM)redlightrouter Wrote: Thanks, I tried to patch that vector. Can you confirm that?
What do you mean you tried to patch it? Are you just patching people's vectors they used? How is that fair if you are making it harder & harder lol ?
* - Faith Connors - Dec 10, 2016
(Dec 10, 2016 05:46 AM)๖ۣۜXeon Wrote: What do you mean you tried to patch it? Are you just patching people's vectors they used? How is that fair if you are making it harder & harder lol ?
He didn't patch my vector lol
* - Hoodie+ - Dec 10, 2016
http://image.prntscr.com/image/a6661e68cf0149eca422fb33465b9a3a.png
Easy challenge.
My payload:
Spoiler (Click to View)
* - redlightrouter - Dec 10, 2016
(Dec 10, 2016 05:46 AM)๖ۣۜXeon Wrote: What do you mean you tried to patch it? Are you just patching people's vectors they used? How is that fair if you are making it harder & harder lol ?
Because I want the vector to be identical as the one I had in mind. Faith's vector was good and so is hoodie's vector.
(Dec 10, 2016 06:37 AM)Hoodie+ Wrote: http://image.prntscr.com/image/a6661e68cf0149eca422fb33465b9a3a.png
Easy challenge.
My payload:
Spoiler (Click to View)
Nice! That's what I like to see. Mind removing your vector though? ^^
* - Andrew Carnegie - Dec 10, 2016
prntscr dot com/dhud0j easy did it again :P