The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
Fourteen Years of Service
Posts: 176
Threads: 21
RE: HackCommunity XSS challenge 09-27-2012, 04:26 AM
#11
(09-26-2012, 09:10 PM)1234hotmaster Wrote: Well looking at JS i just noticed there is the String.fromCharCode function XD
I feel like I'm forgetting all of these... I still remember my old XSS tunnel setup 
You're using IE? *facepalm*
To hack is a skill, but a skill may or may not be to hack.
•
Fourteen Years of Service
Posts: 9
Threads: 0
RE: HackCommunity XSS challenge 09-27-2012, 05:00 AM
#12
(09-27-2012, 04:26 AM)killerOfCode Wrote: (09-26-2012, 09:10 PM)1234hotmaster Wrote: Well looking at JS i just noticed there is the String.fromCharCode function XD
I feel like I'm forgetting all of these... I still remember my old XSS tunnel setup 
You're using IE? *facepalm*
Some browsers don't show the XSS alert... Internet Explorer shows it about 99% of the time sir.
•
Fourteen Years of Service
Posts: 2,249
Threads: 167
RE: HackCommunity XSS challenge 09-27-2012, 08:25 AM
#13
Fuck Level 2 , i wonder why i can't do that ,

, realize it was my goddamn browsers Security Addons
•
Fourteen Years of Service
Posts: 3,799
Threads: 957
RE: HackCommunity XSS challenge 09-27-2012, 09:06 AM
#14
(09-27-2012, 08:25 AM)Shining White Wrote: fudge Level 2 , i wonder why i can't do that ,
, realize it was my goddamn browsers Security Addons 
I was seriously worried the challenge will last only a day, but seeing it took 1 day only to solve 2 challenges xD
I'll be slowly making guides for every solved challenge. Starting with a guide: choosing the right browser
Staff will never ever ask you for your personal information.
We know everything about you anyway.
•
Fourteen Years of Service
Posts: 2,249
Threads: 167
RE: HackCommunity XSS challenge 09-27-2012, 09:49 AM
#15
(09-27-2012, 09:06 AM)1llusion Wrote: (09-27-2012, 08:25 AM)Shining White Wrote: fudge Level 2 , i wonder why i can't do that ,
, realize it was my goddamn browsers Security Addons 
I was seriously worried the challenge will last only a day, but seeing it took 1 day only to solve 2 challenges xD
I'll be slowly making guides for every solved challenge. Starting with a guide: choosing the right browser 
yeah that will helpful :lol:
Level : 3
Spoiler:
Image :
![[Image: sSxKv.png]](http://i.imgur.com/sSxKv.png)
Code : </TITLE><SCRIPT>alert("Shining White from HackCommunity");</SCRIPT>
PS : Windows never will help to the people who like to Pentest

and of course the Application it is wasting the time with these XSS's coz Challenge developer know the XSS better
•
Fourteen Years of Service
Posts: 2,249
Threads: 167
RE: HackCommunity XSS challenge 09-27-2012, 10:33 AM
#16
Level : 4
Spoiler:
Image :
code : <h1>Shining White from HackCommunity</h1>
Illusion Says level 5 is Hard

lets see
•
Fourteen Years of Service
Posts: 8,518
Threads: 1,285
RE: HackCommunity XSS challenge 09-27-2012, 10:37 AM
#17
(09-27-2012, 10:33 AM)Shining White Wrote: Level : 4
Spoiler:
Image :
code : <h1>Shining White from HackCommunity</h1>
Illusion Says level 5 is Hard

lets see
u r cheating, owasp => CTRL - C + CTRL - V
•
Fourteen Years of Service
Posts: 3,799
Threads: 957
RE: HackCommunity XSS challenge 09-27-2012, 10:38 AM
#18
(09-27-2012, 10:33 AM)Shining White Wrote: Level : 4
Spoiler:
Image :
code : <h1>Shining White from HackCommunity</h1>
Illusion Says level 5 is Hard

lets see
I don't agree with this way of solving challenge 4. I'm sorry but get us an alert box

HTML injection by itself doesn't do much.
Staff will never ever ask you for your personal information.
We know everything about you anyway.
•
Fourteen Years of Service
Posts: 2,249
Threads: 167
RE: HackCommunity XSS challenge 09-27-2012, 10:59 AM
#19
(09-27-2012, 10:37 AM)bluedog.tar.gz Wrote: (09-27-2012, 10:33 AM)Shining White Wrote: Level : 4
Spoiler:
Image :
code : <h1>Shining White from HackCommunity</h1>
Illusion Says level 5 is Hard

lets see
u r cheating, owasp => CTRL - C + CTRL - V 
Lulz , Theres no such word "Cheat" exicist on the World of Hax
and the OWASP Mantra can what ? using XSS me not working coz of Illusion had
fix the Injecting Code System ,
can you hax those with Mantra Addon or any plugin , i yes i wonder if you can teach me or suggest me the Addon , plugin
and the Illusion , you mean it can't inject via HTML ? in level 4 ,
what about the level 3 then ?
•
Fourteen Years of Service
Posts: 3,799
Threads: 957
RE: HackCommunity XSS challenge 09-27-2012, 11:03 AM
#20
(09-27-2012, 10:59 AM)Shining White Wrote: (09-27-2012, 10:37 AM)bluedog.tar.gz Wrote: (09-27-2012, 10:33 AM)Shining White Wrote: Level : 4
Spoiler:
Image :
code : <h1>Shining White from HackCommunity</h1>
Illusion Says level 5 is Hard

lets see
u r cheating, owasp => CTRL - C + CTRL - V 
Lulz , Theres no such word "Cheat" exicist on the World of Hax
and the OWASP Mantra can what ? using XSS me not working coz of Illusion had
fix the Injecting Code System ,
can you hax those with Mantra Addon or any plugin , i yes i wonder if you can teach me or suggest me the Addon , plugin
and the Illusion , you mean it can't inject via HTML ? in level 4 ,
what about the level 3 then ?
You can inject HTML, however, I'd like to see an alert box rather than text. The level 4 is about javascript syntax so just putting
Code:
<h1>Shining White from HackCommunity</h1>
kinda ruins the point of that challenge
I'll add this to the rules
EDIT: Added 6th challenge
EDIT2: Added 7th challenge
Staff will never ever ask you for your personal information.
We know everything about you anyway.
•