+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: HackCommunity XSS challenge DOWNLOAD (/Thread-HackCommunity-XSS-challenge-DOWNLOAD)
Pages:
1
2
HackCommunity XSS challenge DOWNLOAD - 1llusion - 11-01-2012
Hi!
Since HC XSS challenge got deleted. ( Suspecting abuse of the challenge )
Anyway I've decided to release it.
!!!NOTE!!! Feel free to upload the XSS challenge on your website. The challenge doesn't need any 3rd party software nor it uses any framework, therefore it is VERY safe. The XSS vulnerabilities are protected against misuse by unique tokens and all users have to agree on the ToS before they can start it. There is absolutely NO CHANCE at all, that the challenge could lead to shell upload OR any kind of system compromise. After all, XSS attacks client, not server
How to use: Upload files to some host. And... that is it
no need for any settings Or you can host it locally too Feel free to edit the files etc.
XSS challenge 1-5 + index.php
https://dl.dropbox.com/u/46190297/misc/XSS%20Challenge.zip.torrent
NOTE: The file is a torrent on purpose. The challenge should help spread the knowledge and torrents are symbol of information sharing. This torrent IS 100% LEGAL (unless your country disallows torrents in general). So help to spread the knowledge and seed
RE: HackCommunity XSS challenge DOWNLOAD - Dawnc0re - 11-01-2012
YAY!!!
Thanks For This 1llusion
RE: HackCommunity XSS challenge DOWNLOAD - bluedog.tar.gz - 11-01-2012
It was deleted because of suspecting abuse of the challenge.
May get re-added later but feel free to use it yourself to.
RE: HackCommunity XSS challenge DOWNLOAD - StormHasHe - 11-01-2012
Thanks a lot guys!
But, what about the challenges 6-8? are they included?? I was working on 8 =D
RE: HackCommunity XSS challenge DOWNLOAD - 1llusion - 11-01-2012
(11-01-2012, 04:45 PM)StormHasHe Wrote: Thanks a lot guys!
But, what about the challenges 6-8? are they included?? I was working on 8 =D
I'll include them later
RE: HackCommunity XSS challenge DOWNLOAD - StormHasHe - 11-06-2012
Btw, can you tell me if my solution to 7 was correct? I'm still not sure about it.
Thanks!
RE: HackCommunity XSS challenge DOWNLOAD - Anima Templi - 11-06-2012
(11-06-2012, 05:59 PM)StormHasHe Wrote: Btw, can you tell me if my solution to 7 was correct? I'm still not sure about it.
Thanks!
How could you be unsure about that? I mean, you should have seen a pop-up/ alert box?
RE: HackCommunity XSS challenge DOWNLOAD - StormHasHe - 11-06-2012
(11-06-2012, 08:02 PM)Anima Templi Wrote:(11-06-2012, 05:59 PM)StormHasHe Wrote: Btw, can you tell me if my solution to 7 was correct? I'm still not sure about it.
Thanks!
How could you be unsure about that? I mean, you should have seen a pop-up/ alert box?
Edit: I'll just explain my doubt here, maybe its faster:
My doubt is because I used another field to inject the javascript, not the intended one, but a hidden input or something like, so i'm not sure if this was the right approach in the context of the challenge.
My answer to 7 is there at the original topic about the challenge, if you would check it out =)
thanks!
RE: HackCommunity XSS challenge DOWNLOAD - 1llusion - 11-07-2012
(11-06-2012, 05:59 PM)StormHasHe Wrote: Btw, can you tell me if my solution to 7 was correct? I'm still not sure about it.
Thanks!
Yeh its correct
RE: HackCommunity XSS challenge DOWNLOAD - StormHasHe - 11-08-2012
Cool, thanks a lot mate! =D