Web - Client

Sunday 27 November 2022, 21:41  #1
Web - Client - XSS DOM Based - Eval
swiftpint
  • 2 posts

I’ve been trying this one for a while and I thought that I’d cracked it.

I’ve come up with some code to use in the main page, which doesnt use parenthesis etc. When i submit in the calculation input on the main page it works and sends my cookie to my requestbin.
However when I submit that url on the contact page I dont get anything coming through to my requestbin.

Am I missing something, maybe another step or needing to format my code a different way? Or is it possible the bot in the challenge isnt working?

Sunday 19 February 2023, 21:55  #2
Web - Client - XSS DOM Based - Eval
mahmoud
  • 1 posts

spoil

Wednesday 26 April 2023, 13:13  #3
Web - Client - XSS DOM Based - Eval
PuPPET
  • 1 posts

yeah me too ,
I dont get anything coming through to my requestbin on the contact page

Thursday 29 August 2024, 17:11  #4
Web - Client - XSS DOM Based - Eval
xorowats
  • 2 posts

I got the same issue. I crafted the URL which when I open with my browser will send the cookies just fine but it won’t work when submitted to the contact page. I’m guessing I could use other techniques to craft the XSS payload which would work, but why is the one I crafted behave like this. Can I figure this out by analyzing the page source more?