Web - Client

Client-side technologies implemented in the web browser

At first you will be faced with problems that will require little to no knowledge of web scripting language. Pretty soon the plot thickens ...

These challenges confront you to the use of scripting languages and client-side programming. They are mostly scripts to analyze and understand. This will allow you to learn languages which are in widespread use on the internet.

Prerequisites:
– Understanding a scripting language such javascript/vbscript
– Understanding the operation of a debugger such firebug/javascript console

42 Challenges

Results	Name	Validations	Number of points	Difficulty	Author	Note	Solution ↓↑	Date
	Same Origin Method Execution	1% 31	90		Mizu		0	28 July 2023
	Browser - bfcache / disk cache	1% 47	65		Mizu		0	28 July 2023
	Javascript - Obfuscation 6	1% 100	60		n3rada		0	27 April 2023
	CSPT - The Ruler	1% 17	60		Rolix , Mizu		0	27 September 2024
	Flash - Authentication	2% 6290	40		koma		1	18 June 2012
	CSP Bypass - Nonce 2	1% 443	35		Ruulian		1	27 June 2023
	CSS - Exfiltration	1% 595	50		Forgi , gwel		1	8 April 2022
	Relative Path Overwrite	1% 140	50		Mizu		1	28 July 2023
	CSP Bypass - Dangling markup	1% 1659	45		CanardMandarin		1	27 October 2020
	DOM Clobbering	1% 341	60		Mizu		1	8 April 2022
	Self XSS - Race Condition	1% 76	60		Mizu		1	28 July 2023
	Web Socket - 0 protection	1% 865	35		Worty		1	22 October 2021
	XS Leaks	1% 180	75		Mizu		1	8 April 2022
	CSP Bypass - Dangling markup 2	1% 1351	50		CanardMandarin		1	27 October 2020
	AST - Deobfuscation	1% 1342	35		mhoste , Lxt3h		2	27 June 2023
	HTTP Response Splitting	1% 2368	70		Arod		3	7 November 2013
	XSS DOM Based - AngularJS	1% 2403	40		Ruulian		3	12 August 2021
	Self XSS - DOM Secrets	1% 216	55		Mizu		3	28 July 2023
	Javascript - Obfuscation 5	1% 785	70		Hel0ck		3	4 February 2011
	Javascript - Webpack	8% 25703	15		CanardMandarin		3	11 August 2020
	Javascript - Authentication 2	41% 138794	10		na5sim		4	3 February 2011
	CSP Bypass - Nonce	1% 886	50		Ruulian		4	8 April 2022
	XSS DOM Based - Introduction	2% 5590	35		Ruulian		4	12 August 2021
	Javascript - Obfuscation 4	2% 6698	50		aaSSfxxx		5	18 July 2011
	XSS DOM Based - Eval	1% 2661	40		Ruulian		5	12 August 2021
	Javascript - Source	44% 150664	5		g0uZ		5	7 October 2006
	CSP Bypass - JSONP	1% 1338	45		CanardMandarin		5	27 October 2020
	XSS - Reflected	2% 6098	45		pickle		6	16 March 2018
	XSS - DOM Based	1% 842	85		vic		6	24 December 2016
	XSS - Stored 2	3% 9074	50		g0uZ		7	4 March 2012
	XSS DOM Based - Filters Bypass	1% 1387	50		Ruulian		7	12 August 2021
	XSS - Stored - filter bypass	1% 1469	80		Arod , sambecks		8	2 January 2016
	CSRF - token bypass	3% 7161	45		sambecks		8	18 February 2016
	CSRF - 0 protection	6% 20146	35		sambecks		8	16 February 2016
	CSP Bypass - Inline code	2% 5334	35		CanardMandarin		8	27 October 2020
	Javascript - Native code	25% 84490	15		g0uZ		8	13 March 2011
	Javascript - Obfuscation 2	34% 113775	10		Hel0ck		8	3 February 2011
	Javascript - Authentication	47% 159111	5		g0uZ		9	8 October 2006
	XSS - Stored 1	12% 39276	30		g0uZ		10	3 March 2012
	Javascript - Obfuscation 3	19% 62366	30		Hel0ck		10	4 February 2011
	Javascript - Obfuscation 1	39% 131619	10		Hel0ck		10	7 October 2006
	HTML - disabled buttons	44% 150175	5		Final		10	16 July 2017

Challenge Results

Pseudo	Challenge	Lang	Date
EEEBBB	Javascript - Authentification 2		16 November 2024 at 17:54
Klcium	Javascript - Webpack		16 November 2024 at 17:51
tzar67	Javascript - Source		16 November 2024 at 17:50
alexplv	Javascript - Webpack		16 November 2024 at 17:48
tzar67	Javascript - Authentification		16 November 2024 at 17:47
E1ite	HTML - disabled buttons		16 November 2024 at 17:47
tzar67	HTML - boutons désactivés		16 November 2024 at 17:44
narakuvel	AST - Deobfuscation		16 November 2024 at 17:42
Klcium	CSP Bypass - Nonce 2		16 November 2024 at 17:35
alexplv	Javascript - Native code		16 November 2024 at 17:35