I just don't get the point???

Maxima
10 years ago

0

Hi All. I have got the required response in many ways;
&#60script&#62alert(‘HackThis!!’);&#60/script&#62
<script>alert(‘HackThis!!’);</script>
BOTH give the text as I thought I was meant to? and both have had several formats.
What is the point of this?
XSS?
It clearly is not just to be able to produce the result by fooling the filter. Is it supposed to be an instruction received at the filter?
Are you meant to get it from the page input or from an external HTML document so it reads it as HTML? Completely lost?

15replies
5voices
274views
Statey
10 years ago

0

your overthinking it!
read the hint and take it easy.

Abhi
10 years ago

0

Yaa…don’t over think the problem. Most of the important hints are in the older threads.
Nevertheless , I’ll leave a major hint here :
undedetectedtected !!
Muxh needed hint for the level :)

Maxima
10 years ago

0

Thanks. I have seen the undedetectedtected several times over and figured it was referring to <script>, but now i’m thinking one layer turns this into a command to execute - the bit i’m missing?

Maxima
10 years ago

0

Over-thinking… Grrr tried this and got the alert. Dumbfounded.
‘;alert(String.fromCharCode(88,83,83))//’;alert(String.fromCharCode(88,83,83))//“;
alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//–

“>‘>

Statey
10 years ago

0

think about what the filter does and use your knowledge from the undeundetectedtected hint.
idk what exactly your trying but you only need a simple single line here.

Cyan Wind [freewind1012]
10 years ago | edited 10 years ago

0

@Maxima: Intermerdiate Level 4 is not about XSS. Therefore, your attempts to create an alert box is useless.

You need to create the expected output in the gray box which will appear after submitting:
```
<?a

Maxima
10 years ago

0

Hmm
Well if i use this code, I not only get : in the output box, but also get the alert?????

<script>alert(‘HackThis!!’);</script>

I thought my original entry of my first post did what was required?

The output box is supposed to just say :- is it not? - I think that was the point of this exercise, but why oh why does my code fail?????????

Cyan Wind [freewind1012]
10 years ago | edited 10 years ago

0

@Maxima: Did you inspect element as I suggested? Inspect the grey box and you will figure out [b]what is really printed out[b].

Maxima
10 years ago

0

Inspect element - how? sorry, but totally new to this?
I am using Fierfox, I know right click to inspect element, but can I see the value of the entry? is that what I need?
Is there something you can tell me to do that will show me what is wrong in the value?
I self taught VB programming, so a class is an instance of an object, like an X5 is a class of BMW which may in turn could be a class of a CAR object, is it not? So where does an unwanted class fit into this?
I don’t see how class fits in with the output?

Maxima
10 years ago

0

do you mean the first < ?

Cyan Wind [freewind1012]
10 years ago | edited 10 years ago

2

[quote=Maxima]I thought my original entry of my first post did what was required?[/quote]
sigh Yeah, I mean your original entry.

How to use Inspect Element in Firefox:

Submit your entry again > Move your cursor to the grey box > Right click and choose Inspect Element (Q) (Firefox) > Read the HTML code inside

> Compare the printed output with the required result.
Maxima
10 years ago

0

Cheers Freewind, I think I get it now :) lets see…

[IAmDevil]
10 years ago | edited 10 years ago

0

Its almost like a step by step answer lol! If you still didn’t get it then God be with you. :p

Abhi
10 years ago

0

Take your time @Maxima !! Its better to know one thing completely and then doing it than doing many things altogether and understanding little about any !!

Maxima
10 years ago

1

Well that was a blast!! Lol. 708 attempts and 2.5 days, but finally completed with a simple line :) closing the thread lol.

Discussion thread has been locked. You can no longer add new posts.
1 of 16

This site only uses cookies that are essential for the functionality of this website. Cookies are not used for tracking or marketing purposes.

By using our site, you acknowledge that you have read and understand our Privacy Policy, and Terms of Service.

Dismiss