Spoof Call and Spoof SMS set any caller ◆ ZexoCard: no-KYC virtual crypto cards ◆ Traffic service & campaign optimization ◆ Private Crypter - Unique Private Stubs ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Beginner Hacking › [intigriti] - XSS Challenge

New Reply 

[intigriti] - XSS Challenge
realsunjester
realsunjester Offline
C8H10N4O2
***
HF l33t
Posts:
1,809
Threads:
142
Credibility:
000
Popularity:
189
βytes:
β 0
Game XP:
9,532
May 2, 2019 04:01 PM
[Image: logo.svg]

Quote:Try to exploit a DOM XSS vulnerability on this page to trigger a popup of the document.domain (challenge.intigriti.io).
The winner gets a Burp License (1 year), an exclusive swag package and invitations to private programs.

https://challenge.intigriti.io/
http://sunjester.rf.gd - proxies, logins, scanner results
Fire
Fire Offline
(Honestly, God Bless)
***
HF Ub3r
Posts:
1,932
Threads:
109
Credibility:
100
Popularity:
483
βytes:
β 0
Game XP:
91
May 2, 2019 08:34 PM
I feel kind of clueless dang... following.

[Image: tlTStiX.png]
Faith Connors
Faith Connors Away
BɅNSHEE
****
HF Ub3r
Posts:
6,190
Threads:
178
Credibility:
1700
Popularity:
609
βytes:
β 0
Game XP:
5,813
May 2, 2019 08:36 PM (This post was last modified: May 2, 2019 10:05 PM by Faith Connors.)
Figured out how to get the iframe, guess thats the easy part.
dont have enough time to play around with it more, since i gotta sleep soon and have other work to do, but i have a pretty good idea of how it's done and just need to play around with parameters now.
humble rubyist in a world of pythonistas
realsunjester
realsunjester Offline
C8H10N4O2
***
HF l33t
Posts:
1,809
Threads:
142
Credibility:
000
Popularity:
189
βytes:
β 0
Game XP:
9,532
May 3, 2019 01:11 AM
I've been working the SVG angle (the logo) but haven't gotten too far lol
http://sunjester.rf.gd - proxies, logins, scanner results
Fire
Fire Offline
(Honestly, God Bless)
***
HF Ub3r
Posts:
1,932
Threads:
109
Credibility:
100
Popularity:
483
βytes:
β 0
Game XP:
91
May 4, 2019 05:04 PM
Here is the solution: https://dee-see.github.io/intigriti/xss/...iteup.html

Very interesting read.

[Image: tlTStiX.png]
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by redlightrouterAug 18, 2017 03:30 PM 16 736 Aug 18, 2017 03:30 PM
Last Post: redlightrouter
by redlightrouterJul 27, 2017 03:08 PM 34 1,190 Jul 27, 2017 03:08 PM
Last Post: redlightrouter
by redlightrouterJul 23, 2017 10:28 PM 4 227 Jul 23, 2017 10:28 PM
Last Post: mutybyte