niedziela, 21 września 2014

CSAW CTF Web300 writeup

In this post I want to show my solution for CSAW CTF - Web300. This is the service, where we are able to post some links, that are parsed by bot, and looks like this:



There are two important things about this task. First of all, we can notice that page using jquery 1.6.1 (which prone to XSS - CVE-2011-4969) - and serving this kind of code:

The other thing is that bot is based on PhantomJS, so there's a chance, that it interprete javascript on page just like normal browser. ;)

My first shot after connecting those two facts was to exploit XSS on bot, and steal the cookies. It was correct and gave me a flag - these_browser_bots_are_annoying :-)




Pretty simple. doesn't it? :)

28 komentarzy:

  1. Odpowiedzi
    1. A befuddling web diary I visit this blog, it's incredibly grand. Strangely, in this present blog's substance made motivation behind fact and sensible. The substance of information is instructive
      ابی

      معین

      Usuń
  2. A befuddling web diary I visit this blog, it's incredibly grand. Strangely, in this present blog's substance made motivation behind fact and sensible. The substance of information is instructive
    Oracle Fusion Financials Online Training
    Oracle Fusion HCM Online Training
    Oracle Fusion SCM Online Training

    OdpowiedzUsuń
  3. This is one of the best post i have read in months, its really great and inspiring, i will really like to read more form you and will like to share with others as well, keep writing more
    Buy Weed Seeds Online
    Buy A-796,260 Online
    Buy Phenethylamine Psychedelics online
    Subutex 8mg Online
    Order Quaaludes Mandrax 300mg online
    Buy DMT Dimethyltryptamine Online
    Valium Diazepam For Sale Online
    Buy Harvoni ledipasvir sofosbuvir online
    Cannabis Oil For Sale
    Buy enzodiazepines online you can as well Whatsapp/Text +1(646)883-3072 , Telegram: primenature or email:primepharma0@gmail.com for more details.

    OdpowiedzUsuń
  4. I just loved your article on the beginners guide to starting a blog.If somebody take this blog article seriously in their life,
    he/she can earn his living by doing blogging.thank you for thizs article. pega online training

    OdpowiedzUsuń
  5. Thanks for Sharing This Article.It is very so much valuable content. I hope these Commenting lists will help to my website
    top mulesoft online training

    OdpowiedzUsuń
  6. we can notice that page using jquery 1.6.1

    OdpowiedzUsuń
  7. Thanks for Sharing This Article.It is very so much valuable content. I hope these Commenting lists will help to my website blockchain online training

    OdpowiedzUsuń
  8. 77%OFF Coach Outlet Store-Coach Bags Clearance Sale,100% Popular
    New & Popular Ray Ban Sunglasses Outlet Store Online,2020-2021 Stylish
    Clearance Coach Store | 80%OFF Coach Bags Outlet On Sale Online
    Share Best Best Adidas Yeezys Store|100% New & Real Yeezy Boost For Sale
    2020 Nike Air For 1 Shoes Outlet For Men & Women, 68-85%OFF Cheap Sale
    Official Michael Kors Outlet Store Online,100% Cheap MK Bags Sale
    61-82%OFF Air Jordan Shoe Stores|Cheap Jordans Releases,Hot Sale

    OdpowiedzUsuń
  9. Enjoyed reading the article above, really explains everything in detail, the article is very interesting and effective. Thank you and good luck for the upcoming articles
    Mulesoft Online Training

    OdpowiedzUsuń
  10. We are an online and retail dealer and distribution center based in USA. We specialize in providing quality firearms and accessories to registered buyers

    beretta px4 storm for sale

    sig sauer p938 for sale

    glock 30 for sale

    beretta for sale

    OdpowiedzUsuń
  11. Wow! Excellent Post. I really found this so much informatics. It is what I was searching for I would like to suggest you that please keep sharing Such type of information. Thank you so much.
    Buy psychedelics online

    OdpowiedzUsuń
  12. Our Persian felines are fed a high-quality diet, necessary feline formulated vitamins, kittens care and grooming Here at Marko Persians our cats and kittens are happy, sweet love bunnies, therefore, well socialized Healthy and exquisitely beautiful and unmatched in the Silver Doll Face Industry. Specializing in CFA Persian kittens meeting the breed standard with several coat colors and coat pattern – shades



    Persian Kittens for sale near me
    Persian Kittens for sale
    Persian Kittens for sale near me

    OdpowiedzUsuń
  13. Nice article. Thank you for sharing.
    Mulesoft Training

    OdpowiedzUsuń
  14. I think many of those who read this are asked a lot of online tests or exams, just like me. And I decided to fight this, because doing everything myself quickly gets boring. I started looking for a person who would take my online class. Of all the options that I found, this site turned out to be the best. On it, I was able to quickly agree on everything and send my tasks. The next day everything was ready and everything was done very well. I definitely advise you!

    OdpowiedzUsuń
  15. Excellent blog, I loved it so much that I came back here to give feedback. Thanks though. Also download Null's Brawl Apk.

    OdpowiedzUsuń

  16. شركة نقل عفش بالرياض وجدة والدمام والخبر والجبيل اولقطيف والاحساء والرياض وجدة ومكة المدينة المنورة والخرج والطائف وخميس مشيط وبجدة افضل شركة نقل عفش بجدة نعرضها مجموعة الفا لنقل العفش بمكة والخرج والقصيم والطائف وتبوك وخميس مشيط ونجران وجيزان وبريدة والمدينة المنورة وينبع افضل شركات نقل الاثاث بالجبيل والطائف وخميس مشيط وبريدة وعنيزو وابها ونجران المدينة وينبع تبوك والقصيم الخرج حفر الباطن والظهران
    شركة نقل عفش بجدة
    شركة نقل عفش بالمدينة المنورة
    شركة نقل اثاث بالرياض
    شركة نقل عفش بالدمام
    شركة نقل عفش بالطائف
    شركة نقل عفش بمكة
    شركة نقل عفش بينبع

    OdpowiedzUsuń