webProeasy

Easy 4

web-kids20

XSS challenge where input is placed into an `<a href="">` attribute. The escape function filters dangerous patterns but uses case-sensitive regex.

$ ls tags/ techniques/
xssregex_bypassjavascript_uricase_bypasshref_injection
javascript_uri_case_bypasscase_sensitive_filter_evasion
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups