Web - Client
Web - Client - XSS DOM Based - Eval
I’ve been trying this one for a while and I thought that I’d cracked it.
I’ve come up with some code to use in the main page, which doesnt use parenthesis etc. When i submit in the calculation input on the main page it works and sends my cookie to my requestbin.
However when I submit that url on the contact page I dont get anything coming through to my requestbin.
Am I missing something, maybe another step or needing to format my code a different way? Or is it possible the bot in the challenge isnt working?
Web - Client - XSS DOM Based - Eval
I got the same issue. I crafted the URL which when I open with my browser will send the cookies just fine but it won’t work when submitted to the contact page. I’m guessing I could use other techniques to craft the XSS payload which would work, but why is the one I crafted behave like this. Can I figure this out by analyzing the page source more?