PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

YesWeHack & Alibaba Security Meetup challenge solution

yeswehack.com | blog | #browser-security | #ctf | #web-security | #xss | #writeup | #alibaba
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A step-by-step solution to the XSS challenge from the YesWeHack and Alibaba Security Meetup: three levels of increasing difficulty, from a debug-parameter leak to escaping bypasses, on Chrome 75.
Published
Collected

Related coverage

blog · yeswehack.com
Dojo challenge #54 Highscore solution
Dojo Solution - Hacker Club: Filter bypass and JSON injection to achieve improper access
research · lab.ctbb.show
Challenge Two - Stranger XSS
The second challenge of an XSS miniseries leading up to a writeup on a bug in an open source library.
research · lab.ctbb.show
Challenge One - Strange XSS
A cool challenge introducing an XSS miniseries leading up to a writeup on a bug in an open source library.
research · eshard.com
“Wrongsomewhere”: DG’hAck CTF 2023 write-up
A write-up of DG'hAck 2023's entry "Wrongsomewhere": ransomware, esReven, Ghidra and reversing.
research · eshard.com
Damn Deprecation": DG'hAck CTF 2023 write-up
A write-up of DG'hAck 2023's entry "Damn Deprecation": ransomware, linux forensics, python bytecode and reversing.
research · eshard.com
Guest article: solving a flare-on challenge with esReven
We use esReven to solve the final challenge in last year's Flare-on reverse-engineering CTF.
Back