HTTP Response Splitting

70 Points  0x0

Old vulnerability... but powerful !

Author

Arod,  

Level  Difficulty

Validations

2436 Challengers 1%

Note  Notation

1
2
3
4
5
225 Votes

To reach this part of the site please login

solutions 3 Solutions

Display solutions Submit a solution

Challenge Results Challenge Results

Pseudo Challenge Lang Date
tedi_v Web - Client  HTTP Response Splitting fr 25 February 2025 at 18:49
merlleu Web - Client  HTTP Response Splitting fr 21 February 2025 at 15:09
KOOLI Web - Client  HTTP Response Splitting en 20 February 2025 at 21:18
KaeLCe Web - Client  HTTP Response Splitting fr 19 February 2025 at 12:24
laznox Web - Client  HTTP Response Splitting fr 17 February 2025 at 12:01
danix Web - Client  HTTP Response Splitting fr 17 February 2025 at 12:01
Atlas_py Web - Client  HTTP Response Splitting fr 17 February 2025 at 05:34
crazycat256 Web - Client  HTTP Response Splitting fr 14 February 2025 at 12:18
MDI Web - Client  HTTP Response Splitting fr 8 February 2025 at 19:55
Drachh Web - Client  HTTP Response Splitting fr 2 February 2025 at 18:13

challenges 42 Challenges

Results Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution Date
pas_valide HTML - disabled buttons 44% 156281 5 Final 10 16 July 2017
pas_valide Javascript - Authentication 47% 164756 5 g0uZ 9 8 October 2006
pas_valide Javascript - Source 44% 155883 5 g0uZ 5 7 October 2006
pas_valide Javascript - Authentication 2 41% 143863 10 na5sim 4 3 February 2011
pas_valide Javascript - Obfuscation 1 39% 136324 10 Hel0ck 10 7 October 2006
pas_valide Javascript - Obfuscation 2 33% 117869 10 Hel0ck 8 3 February 2011
pas_valide Javascript - Native code 25% 87414 15 g0uZ 8 13 March 2011
pas_valide Javascript - Webpack 8% 27390 15 CanardMandarin 3 11 August 2020
pas_valide Javascript - Obfuscation 3 18% 64418 30 Hel0ck 10 4 February 2011
pas_valide XSS - Stored 1 12% 41064 30 g0uZ 10 3 March 2012
pas_valide AST - Deobfuscation 1% 1786 35 mhoste , Lxt3h 2 27 June 2023
pas_valide CSP Bypass - Inline code 2% 5741 35 CanardMandarin 8 27 October 2020
pas_valide CSP Bypass - Nonce 2 1% 579 35 Ruulian 1 27 June 2023
pas_valide CSRF - 0 protection 6% 20906 35 sambecks 8 16 February 2016
pas_valide Web Socket - 0 protection 1% 916 35 Worty 1 22 October 2021
pas_valide XSS DOM Based - Introduction 2% 6095 35 Ruulian 4 12 August 2021
pas_valide Flash - Authentication 2% 6424 40