puzzled... Go to the Yourself PHP challenge
Global Rank: 1359
Totalscore: 17553
Posts: 5
Thanks: 6
UpVotes: 5
Registered: 12y 210d
Last Seen: 7y 255d
The User is Offline
puzzled...
Jan 14, 2011 - 22:01:33 (11y 256d)
Jan 14, 2011 - 22:01:33 (11y 256d)
So... I think I found how to exploit the script. I actually made a JS alert pop-up
by exploiting it correctly
, but it doesn't seem to be what's needed to solve the challenge.
Any hints there?
Any hints there?
Last edited by gizmore - Jan 14, 2011 - 22:19:41
Global Rank: 510
Totalscore: 46424
Posts: 217
Thanks: 198
UpVotes: 202
Registered: 11y 283d
The User is Offline
RE: puzzled...
Jan 14, 2011 - 22:18:22 (11y 256d)
Jan 14, 2011 - 22:18:22 (11y 256d)
you're on the right way
Contact only via c3BhY2VAd2VjaGFsbC5uZXQ= or PM...
Windows can be secure... but only if you don't use it
Windows can be secure... but only if you don't use it
Global Rank: 239
Totalscore: 86353
Posts: 1505
Thanks: 1278
UpVotes: 803
Registered: 14y 222d
Last Seen: 11h 16m
The User is Offline
RE: puzzled...
Jan 14, 2011 - 22:18:47 (11y 256d)
Jan 14, 2011 - 22:18:47 (11y 256d)
Minify or pm me your xss.
Edit: Also make sure you inject exactly <script>alert(1);</script>
Edit: Also make sure you inject exactly <script>alert(1);</script>
The geeks shall inherit the properties and methods of object earth.
Last edited by gizmore - Jan 14, 2011 - 22:23:19
Global Rank: 1359
Totalscore: 17553
Posts: 5
Thanks: 6
UpVotes: 5
Registered: 12y 210d
Last Seen: 7y 255d
The User is Offline
RE: puzzled...
Jan 15, 2011 - 00:38:21 (11y 256d)
Jan 15, 2011 - 00:38:21 (11y 256d)
I forgot the ; after the alert! Now it works 
Redknee, tunelko, silenttrack, n0tHappy, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0 have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 10759 times.
1 people are watching the thread at the moment.
This thread has been viewed 10759 times.