Xss
Dojo #25
by YesWeHack
drag_indicator
drag_indicator
drag_indicator
RootCSS - DOJO #25 (Until 22/07/2023)
How to submit your solution?
- Visit the DOJO program at https://yeswehack.com/programs/dojo
- Click on Submit report
- Login or create your account
- Submit your report
Desciption
Don't underestimate the power of CSS. It may seem to be very limited, but CSS also offers a lot of functionality because it can interact with the Document Object Model (DOM). A CSS injection can therefore perform various attacks such as reading values in HTML attributes, reading keystrokes in user input sections or preforming a request to the attacker's server by using functions such as url().
Hint
~ CSS is very important!
GOAL
BRUTE FORCE IS NOT ALLOWED!
The valid solution for this challenge must meet these requirements:
-
Use CSS code to manipulate the page to execute an Cross Site Scripting (XSS) that you created.
-
The report should include your CSS code and also proof that the CSS code made it possible to perform an XSS.
drag_indicator
INPUT
OUTPUT
drag_indicator
drag_indicator