I have a solution but

Spid3rman
9 years ago

0

hello, I have the right alert box but it doesn’t validate.

10replies

6voices

248views

Reply has been removed

? [bolofecal]
9 years ago

0

@Spid3rman if your question may contain a spoiler pm me.

@sawkiy your post is in wrong place.

?

? [bolofecal]
9 years ago

0

About the alert box if you make in console it is wrong you must xss the page bypassing the filter.

?

Mugi [Mugiwara27]
9 years ago

0

If the level does not say “Level Complete” it means your “solution” is wrong :)

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

Spid3rman
9 years ago

0

I know Mugiwara but I bypass the filter and the alert box appears

Mugi [Mugiwara27]
9 years ago

0

In this level you don’t have to prompt a alert box like you think
Read other threads about this level you’ll understand

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘\’‘ at line 1

learningforfun
9 years ago

0

Help with Intermediate level 4
I understand the task to generate the panel to product the ,
when I input
<<SCR<script\0\0>script>alert(‘HackThis!!’);<</SRC</scr\0\0ipt>/script>

I get which I think is correct but the task will not complete. Can anyone give me a nudge in the right direction?

Thanks

? [bolofecal]
9 years ago

0

but your output is in html entities and will not run your js.

?

learningforfun
9 years ago

0

thanks bolofecal, but I confused. when I implement other methods I get a popup with the required text but is tack still isn’t complete.
BTW - sorry Im new, what is the secret message about?

? [bolofecal]
9 years ago

0

The secret message is my signature, it appears in my all forum posts, ignore it. Continue working in this level you are close to complete. Read anothers threads, maybe the “undetectable” hint will help you.

?

dloser
9 years ago

0

Make sure the code that is giving you the popup is exactly the code that is requested. No extra characters/spaces, the right case, etc.

You must be logged in to reply to this discussion. Login

1 of 11