webeasy

Medium 0 - toUpperCase XSS Bypass

spbctf

Task: XSS challenge where user input passes through toUpperCase() escape function. Solution: Use HTML numeric character references (&#NNN;) to encode JS code in event handlers, since HTML is case-insensitive and entities are decoded after HTML parsing.

$ ls tags/ techniques/
xsshtml_entitiessibearsxsstouppercasebypass
touppercase_bypass_html_entitieshtml_numeric_character_reference
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]