Web - Client

Client-side technologies implemented in the web browser

At first you will be faced with problems that will require little to no knowledge of web scripting language. Pretty soon the plot thickens ...

These challenges confront you to the use of scripting languages and client-side programming. They are mostly scripts to analyze and understand. This will allow you to learn languages which are in widespread use on the internet.

Prerequisites:
– Understanding a scripting language such javascript/vbscript
– Understanding the operation of a debugger such firebug/javascript console

42 Challenges

Results	Name	Validations	Number of points	Difficulty	Author	Note ↓↑	Solution	Date
	Relative Path Overwrite	1% 166	50		Mizu		1	28 July 2023
	DOM Clobbering	1% 369	60		Mizu		1	8 April 2022
	HTML - disabled buttons	44% 154852	5		Final		10	16 July 2017
	Javascript - Obfuscation 1	39% 135199	10		Hel0ck		10	7 October 2006
	Javascript - Authentication	47% 163454	5		g0uZ		9	8 October 2006
	CSP Bypass - JSONP	1% 1403	45		CanardMandarin		5	27 October 2020
	XSS DOM Based - Filters Bypass	1% 1479	50		Ruulian		7	12 August 2021
	Javascript - Authentication 2	41% 142678	10		na5sim		4	3 February 2011
	Javascript - Obfuscation 2	33% 116880	10		Hel0ck		8	3 February 2011
	Javascript - Source	44% 154678	5		g0uZ		5	7 October 2006
	XSS - Stored 2	3% 9387	50		g0uZ		7	4 March 2012
	XSS DOM Based - Eval	1% 2841	40		Ruulian		5	12 August 2021
	Self XSS - DOM Secrets	1% 233	55		Mizu		3	28 July 2023
	CSP Bypass - Dangling markup	1% 1733	45		CanardMandarin		1	27 October 2020
	Same Origin Method Execution	1% 35	90		Mizu		0	28 July 2023
	CSP Bypass - Nonce	1% 993	50		Ruulian		4	8 April 2022
	XSS DOM Based - Introduction	2% 5966	35		Ruulian		4	12 August 2021
	XSS DOM Based - AngularJS	1% 2553	40		Ruulian		3	12 August 2021
	XS Leaks	1% 188	75		Mizu		1	8 April 2022
	CSP Bypass - Inline code	2% 5629	35		CanardMandarin		8	27 October 2020
	CSRF - 0 protection	6% 20696	35		sambecks		8	16 February 2016
	CSP Bypass - Nonce 2	1% 551	35		Ruulian		1	27 June 2023
	Browser - bfcache / disk cache	1% 56	65		Mizu		0	28 July 2023
	XSS - Stored 1	12% 40559	30		g0uZ		10	3 March 2012
	CSPT - The Ruler	1% 20	60		Rolix , Mizu		0	27 September 2024
	CSRF - token bypass	3% 7366	45		sambecks		8	18 February 2016
	HTTP Response Splitting	1% 2413	70		Arod		3	7 November 2013
	Javascript - Native code	25% 86705	15		g0uZ		8	13 March 2011
	XSS - Reflected	2% 6326	45		pickle		6	16 March 2018
	CSS - Exfiltration	1% 635	50		Forgi , gwel		1	8 April 2022
	Self XSS - Race Condition	1% 85	60		Mizu		1	28 July 2023
	Web Socket - 0 protection	1% 906	35		Worty		1	22 October 2021
	XSS - DOM Based	1% 853	85		vic		6	24 December 2016
	CSP Bypass - Dangling markup 2	1% 1432	50		CanardMandarin		1	27 October 2020
	Javascript - Obfuscation 6	1% 108	60		n3rada		0	27 April 2023
	XSS - Stored - filter bypass	1% 1510	80		Arod , sambecks		8	2 January 2016
	Javascript - Obfuscation 3	19% 63894	30		Hel0ck		10	4 February 2011
	AST - Deobfuscation	1% 1656	35		mhoste , Lxt3h		2	27 June 2023
	Javascript - Obfuscation 4	2% 6864	50		aaSSfxxx		5	18 July 2011
	Flash - Authentication	2% 6386	40		koma		1	18 June 2012
	Javascript - Webpack	8% 26968	15		CanardMandarin		3	11 August 2020
	Javascript - Obfuscation 5	1% 794	70		Hel0ck		3	4 February 2011

Challenge Results

Pseudo	Challenge	Lang	Date
Ismail Latrach	HTML - boutons désactivés		23 February 2025 at 12:56
Gribouille	Javascript - Obfuscation 1		23 February 2025 at 12:49
hatboss	CSRF - token bypass		23 February 2025 at 12:46
adil78	Javascript - Obfuscation 4		23 February 2025 at 12:43
dromadeuse	HTML - boutons désactivés		23 February 2025 at 12:24
N3KO	XSS - Stockée 2		23 February 2025 at 12:22
BlinkyL	Javascript - Webpack		23 February 2025 at 12:17
Gribouille	Javascript - Authentification 2		23 February 2025 at 12:09
Gribouille	Javascript - Source		23 February 2025 at 12:02
roostwinn	CSP Bypass - Inline code		23 February 2025 at 12:00