Xss

Dojo #22

drag_indicator
info
drag_indicator
inputs
drag_indicator
inspect

DOM XSS Clobbering - Butters Adventure v2 - DOJO #22 (Until 01/04/2023)

~ DOM clobbering can be very effective against JavaScript! ;)

How to submit your solution?

  1. Go on https://yeswehack.com/programs/dojo
  2. Click on Submit report
  3. Login or create your account
  4. Submit your report

Hint

What is a Document Object Model (DOM) Clobbering?

- -learn - -help

The write-up for the first Butters Adventure (DOJO #20) can be found here

Rules

You must ONLY use the following HTML tags <a>, <div>, <img>, <svg>, <input>, <button>.

BRUTE FORCE IS NOT ALLOWED!

Goal

The valid solution for this DOM XSS Clobbering must meet this requirement:

  • Make a valid XSS Clobbering that somehow trigger the catch(e){...} code line.

(You will receive an alert when you have solved the challenge!)

Story time

DOJO #20... Cartman and Butters almost managed to escape from the virtual reality, but they got stuck and couldn't delete the system that kept them trapped in the virtual reality. The time is running out... Don't let Butters get grounded!

~ Oh double hamburgers! / Butters

drag_indicator
waf
INPUT
OUTPUT
drag_indicator
code
drag_indicator
result