webmedium

Medium 5 - JavaScript URL Scheme Bypass

spbctf

Task: XSS challenge where javascript keyword is filtered with regex and parentheses are blocked. Solution: Use whitespace (tab) in URL scheme to bypass regex filter and HTML entities to encode parentheses.

$ ls tags/ techniques/
xsshtml_entitiesregex_bypasssibearsxsshref_injectionjavascript_url
whitespace_scheme_bypasshtml_entity_encodingregex_evasion
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]