Xss
Dojo #22
by YesWeHack
drag_indicator
drag_indicator
drag_indicator
DOM XSS Clobbering - Butters Adventure v2 - DOJO #22 (Until 01/04/2023)
~ DOM clobbering can be very effective against JavaScript! ;)
How to submit your solution?
- Go on https://yeswehack.com/programs/dojo
- Click on Submit report
- Login or create your account
- Submit your report
Hint
What is a Document Object Model (DOM) Clobbering?
The write-up for the first Butters Adventure (DOJO #20) can be found here
Rules
You must ONLY use the following HTML tags <a>
, <div>
, <img>
, <svg>
, <input>
, <button>
.
BRUTE FORCE IS NOT ALLOWED!
Goal
The valid solution for this DOM XSS Clobbering must meet this requirement:
- Make a valid XSS Clobbering that somehow trigger the
catch(e){...}
code line.
(You will receive an alert when you have solved the challenge!)
Story time
DOJO #20... Cartman and Butters almost managed to escape from the virtual reality, but they got stuck and couldn't delete the system that kept them trapped in the virtual reality. The time is running out... Don't let Butters get grounded!
~ Oh double hamburgers! / Butters
drag_indicator
INPUT
OUTPUT
drag_indicator
drag_indicator