webProeasy

Easy 1

web-kids20

SiBears XSS School challenge. User input is placed inside a JavaScript string in the `console.log()` function. Goal: execute `prompt("sibears")`.

$ ls tags/ techniques/
js_string_breakout_xssscript_context_xss

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups

  • [web][Pro]Easy 0— web-kids20
  • [web][Pro]Easy 2— web-kids20
  • [web][Pro]Easy 5— web-kids20
  • [web][Pro]Hard 3— spbctf
  • [web][Pro]Easy 4— web-kids20