7

【XSS-Game】 Level 5 - Breaking protocol

 2 years ago
source link: https://exp-blog.com/safe/ctf/xss-game/level-5-breaking-protocol/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

【XSS-Game】 Level 5

关键找到注入点， Email 输入框只是障眼法，没有任何效果。

真正的注入点是 URL 的 ?next= 参数，输入对应的内容，会改变 Next >> 超链的 href 属性值。

01.png

测试发现双引号和单引号均被过滤，即无法通过闭合引号注入属性。

但是 href 有最简单的注入方法，构造 payload ： javascript:alert("exp")

然后点击 Next 即可触发 alert ：

02.png

赏


report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK