webProeasy

Бесконечность (Infinity)

bug-makers

Task: Express app asks for the password 'Infinity' but forbids all letters and digits and requires exactly 8 symbol-only characters; the backend eval()s the input and compares to Infinity. Solution: build a JSFuck-style 8-char expression +!![]/[] (== 1/0 == Infinity) to bypass the alphanumeric blacklist.

$ ls tags/ techniques/
filter_bypassnodejsjavascriptinfinitytype_coercionexpressevalwebjsfuck
server_side_evaljsfuck_constructionalphanumeric_blacklist_bypasstype_coercion_infinity
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups