webProeasy
Medium 1 - Script Src Attribute Breakout
web-kids20
XSS challenge from the sibearsxss series. User input is inserted into the `src` attribute of a `<script>` tag. If the input starts with http/https, a "/" is prepended.
$ ls tags/ techniques/
attribute_breakoutscript_tag_injectionhtml_injection
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Easy 0— web-kids20
- [web][Pro]Easy 2— web-kids20
- [web][Pro]Medium 2 - Regex Single Replacement Bypass— web-kids20
- [web][Pro]Medium 4 - Double Escape XSS— web-kids20
- [web][Pro]Easy 1— web-kids20