webProeasy

Medium 1 - Script Src Attribute Breakout

web-kids20

XSS challenge from the sibearsxss series. User input is inserted into the `src` attribute of a `<script>` tag. If the input starts with http/https, a "/" is prepended.

$ ls tags/ techniques/
attribute_breakoutscript_tag_injectionhtml_injection

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups