Web - Client

Client-side technologies implemented in the web browser

At first you will be faced with problems that will require little to no knowledge of web scripting language. Pretty soon the plot thickens ...

These challenges confront you to the use of scripting languages and client-side programming. They are mostly scripts to analyze and understand. This will allow you to learn languages which are in widespread use on the internet.

Prerequisites:
– Understanding a scripting language such javascript/vbscript
– Understanding the operation of a debugger such firebug/javascript console

42 Challenges

Results	Name	Validations	Number of points	Difficulty ↓↑	Author	Note	Solution	Date
	HTML - disabled buttons	44% 151910	5		Final		10	16 July 2017
	Javascript - Source	44% 152176	5		g0uZ		5	7 October 2006
	Javascript - Authentication 2	41% 140208	10		na5sim		4	3 February 2011
	Javascript - Obfuscation 1	39% 132949	10		Hel0ck		10	7 October 2006
	Javascript - Obfuscation 2	33% 114923	10		Hel0ck		8	3 February 2011
	Javascript - Authentication	47% 160703	5		g0uZ		9	8 October 2006
	Javascript - Native code	25% 85287	15		g0uZ		8	13 March 2011
	Javascript - Webpack	8% 26155	15		CanardMandarin		3	11 August 2020
	XSS DOM Based - Eval	1% 2720	40		Ruulian		5	12 August 2021
	XSS DOM Based - Filters Bypass	1% 1422	50		Ruulian		7	12 August 2021
	XSS - Stored 2	3% 9194	50		g0uZ		7	4 March 2012
	Javascript - Obfuscation 4	2% 6762	50		aaSSfxxx		5	18 July 2011
	CSP Bypass - Dangling markup 2	1% 1374	50		CanardMandarin		1	27 October 2020
	XSS - Reflected	2% 6168	45		pickle		6	16 March 2018
	CSP Bypass - JSONP	1% 1359	45		CanardMandarin		5	27 October 2020
	CSP Bypass - Dangling markup	1% 1681	45		CanardMandarin		1	27 October 2020
	CSRF - token bypass	3% 7232	45		sambecks		8	18 February 2016
	XSS DOM Based - AngularJS	1% 2450	40		Ruulian		3	12 August 2021
	CSP Bypass - Inline code	2% 5433	35		CanardMandarin		8	27 October 2020
	Flash - Authentication	2% 6323	40		koma		1	18 June 2012
	XSS - Stored 1	12% 39692	30		g0uZ		10	3 March 2012
	AST - Deobfuscation	1% 1435	35		mhoste , Lxt3h		2	27 June 2023
	Javascript - Obfuscation 3	19% 62908	30		Hel0ck		10	4 February 2011
	CSP Bypass - Nonce 2	1% 478	35		Ruulian		1	27 June 2023
	CSRF - 0 protection	6% 20320	35		sambecks		8	16 February 2016
	Web Socket - 0 protection	1% 876	35		Worty		1	22 October 2021
	XSS DOM Based - Introduction	2% 5695	35		Ruulian		4	12 August 2021
	Browser - bfcache / disk cache	1% 50	65		Mizu		0	28 July 2023
	XSS - DOM Based	1% 846	85		vic		6	24 December 2016
	XSS - Stored - filter bypass	1% 1485	80		Arod , sambecks		8	2 January 2016
	XS Leaks	1% 180	75		Mizu		1	8 April 2022
	Javascript - Obfuscation 5	1% 787	70		Hel0ck		3	4 February 2011
	HTTP Response Splitting	1% 2386	70		Arod		3	7 November 2013
	DOM Clobbering	1% 353	60		Mizu		1	8 April 2022
	Self XSS - Race Condition	1% 78	60		Mizu		1	28 July 2023
	Javascript - Obfuscation 6	1% 101	60		n3rada		0	27 April 2023
	CSP Bypass - Nonce	1% 920	50		Ruulian		4	8 April 2022
	CSPT - The Ruler	1% 18	60		Rolix , Mizu		0	27 September 2024
	Self XSS - DOM Secrets	1% 222	55		Mizu		3	28 July 2023
	Relative Path Overwrite	1% 144	50		Mizu		1	28 July 2023
	CSS - Exfiltration	1% 603	50		Forgi , gwel		1	8 April 2022
	Same Origin Method Execution	1% 31	90		Mizu		0	28 July 2023

Challenge Results

Pseudo	Challenge	Lang	Date
for_poland	Javascript - Obfuscation 3		21 December 2024 at 13:22
clear-86	Javascript - Obfuscation 1		21 December 2024 at 13:14
D3c0d3r	XSS - Stored 1		21 December 2024 at 13:09
Иван	XSS - Reflected		21 December 2024 at 13:08
Adzik	Javascript - Obfuscation 2		21 December 2024 at 12:38
odasta	AST - Deobfuscation		21 December 2024 at 12:34
D3c0d3r	XSS DOM Based - Introduction		21 December 2024 at 12:23
delixic3	CSRF - 0 protection		21 December 2024 at 12:23
Vahid	Javascript - Native code		21 December 2024 at 11:58
pokemondu63	Javascript - Native code		21 December 2024 at 11:32