Xss

Dojo #25

drag_indicator
info
drag_indicator
inputs
drag_indicator
inspect

RootCSS - DOJO #25 (Until 22/07/2023)

How to submit your solution?

  1. Visit the DOJO program at https://yeswehack.com/programs/dojo
  2. Click on Submit report
  3. Login or create your account
  4. Submit your report

Desciption

Don't underestimate the power of CSS. It may seem to be very limited, but CSS also offers a lot of functionality because it can interact with the Document Object Model (DOM). A CSS injection can therefore perform various attacks such as reading values in HTML attributes, reading keystrokes in user input sections or preforming a request to the attacker's server by using functions such as url().

Hint

~ CSS is very important!

- -Help - -CSS

GOAL

BRUTE FORCE IS NOT ALLOWED!

The valid solution for this challenge must meet these requirements:

  1. Use CSS code to manipulate the page to execute an Cross Site Scripting (XSS) that you created.

  2. The report should include your CSS code and also proof that the CSS code made it possible to perform an XSS.

drag_indicator
waf
INPUT
OUTPUT
drag_indicator
code
drag_indicator
result