HTTP Response Splitting

70 Points  0x0

Old vulnerability... but powerful !

Author

Arod,  

Level  Difficulty

Validations

2436 Challengers 1%

Note  Notation

225 Votes

To reach this part of the site please login
You should validate this challenge first

Challenge Results Challenge Results

Pseudo Challenge Lang Date
necx Web - Client  HTTP Response Splitting fr 10 August 2023 at 22:32
Belvedere Web - Client  HTTP Response Splitting fr 10 August 2023 at 22:27
SynnSakkaku Web - Client  HTTP Response Splitting fr 10 August 2023 at 16:23
Aituglo Web - Client  HTTP Response Splitting en 9 August 2023 at 17:23
Stormie Web - Client  HTTP Response Splitting fr 8 August 2023 at 18:35
silentvoid Web - Client  HTTP Response Splitting en 7 August 2023 at 15:00
penguinlinux Web - Client  HTTP Response Splitting fr 7 August 2023 at 02:57
r00tm@n Web - Client  HTTP Response Splitting fr 4 August 2023 at 18:13
Khormine Web - Client  HTTP Response Splitting fr 4 August 2023 at 15:48
smiler Web - Client  HTTP Response Splitting fr 3 August 2023 at 23:34

challenges 42 Challenges

Results Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution Date
pas_valide Same Origin Method Execution 1% 40 90 Mizu 0 28 July 2023
pas_valide Browser - bfcache / disk cache 1% 62 65 Mizu 0 28 July 2023
pas_valide Javascript - Obfuscation 6 1% 113 60 n3rada 0 27 April 2023
pas_valide CSPT - The Ruler 1% 21 60 Rolix , Mizu 0 27 September 2024
pas_valide Flash - Authentication 2% 6425 40 koma 1 18 June 2012
pas_valide CSP Bypass - Nonce 2 1% 582 35 Ruulian 1 27 June 2023
pas_valide CSS - Exfiltration 1% 648 50 Forgi , gwel 1 8 April 2022
pas_valide Relative Path Overwrite 1% 173 50 Mizu 1 28 July 2023
pas_valide CSP Bypass - Dangling markup 1% 1774 45 CanardMandarin 1 27 October 2020
pas_valide DOM Clobbering 1% 387 60 Mizu 1 8 April 2022
pas_valide Self XSS - Race Condition 1% 90 60 Mizu 1 28 July 2023
pas_valide Web Socket - 0 protection 1% 917 35 Worty 1 22 October 2021
pas_valide XS Leaks 1% 193 75 Mizu 1 8 April 2022
pas_valide CSP Bypass - Dangling markup 2 1% 1462 50 CanardMandarin 1 27 October 2020
pas_valide AST - Deobfuscation 1% 1793 35 mhoste , Lxt3h 2 27 June 2023
pas_valide HTTP Response Splitting 1% 2433 70