webProeasy
Medium 2 - Regex Single Replacement Bypass
web-kids20
XSS challenge from the sibearsxss series. The escape function uses regex to remove dangerous patterns, but the regex is applied only once (without the `/g` flag).
$ ls tags/ techniques/
regex_single_replacement_bypasssacrificial_pattern_injection
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Medium 1 - Script Src Attribute Breakout— web-kids20
- [web][Pro]Medium 4 - Double Escape XSS— web-kids20
- [web][Pro]Medium 0 - toUpperCase XSS Bypass— web-kids20
- [web][Pro]Easy 0— web-kids20
- [web][Pro]Easy 2— web-kids20