Web - Client

Client-side technologies implemented in the web browser

At first you will be faced with problems that will require little to no knowledge of web scripting language. Pretty soon the plot thickens ...

These challenges confront you to the use of scripting languages and client-side programming. They are mostly scripts to analyze and understand. This will allow you to learn languages which are in widespread use on the internet.

Prerequisites:
– Understanding a scripting language such javascript/vbscript
– Understanding the operation of a debugger such firebug/javascript console

42 Challenges

Results	Name	Validations	Number of points	Difficulty	Author	Note	Solution	Date ↓↑
	Javascript - Source	44% 157937	5		g0uZ		5	7 October 2006
	Javascript - Obfuscation 1	39% 138116	10		Hel0ck		10	7 October 2006
	Javascript - Authentication	46% 166971	5		g0uZ		9	8 October 2006
	Javascript - Obfuscation 2	33% 119465	10		Hel0ck		8	3 February 2011
	Javascript - Authentication 2	41% 145799	10		na5sim		4	3 February 2011
	Javascript - Obfuscation 5	1% 811	70		Hel0ck		3	4 February 2011
	Javascript - Obfuscation 3	18% 65218	30		Hel0ck		10	4 February 2011
	Javascript - Native code	25% 88545	15		g0uZ		8	13 March 2011
	Javascript - Obfuscation 4	2% 7026	50		aaSSfxxx		5	18 July 2011
	XSS - Stored 1	12% 41843	30		g0uZ		10	3 March 2012
	XSS - Stored 2	3% 9699	50		g0uZ		7	4 March 2012
	Flash - Authentication	2% 6481	40		koma		1	18 June 2012
	HTTP Response Splitting	1% 2462	70		Arod		3	7 November 2013
	XSS - Stored - filter bypass	1% 1573	80		Arod , sambecks		8	2 January 2016
	CSRF - 0 protection	6% 21248	35		sambecks		8	16 February 2016
	CSRF - token bypass	3% 7559	45		sambecks		8	18 February 2016
	XSS - DOM Based	1% 871	85		vic		6	24 December 2016
	HTML - disabled buttons	44% 158775	5		Final		10	16 July 2017
	XSS - Reflected	2% 6567	45		pickle		6	16 March 2018
	Javascript - Webpack	8% 28016	15		CanardMandarin		3	11 August 2020
	CSP Bypass - Inline code	2% 5925	35		CanardMandarin		8	27 October 2020
	CSP Bypass - JSONP	1% 1483	45		CanardMandarin		5	27 October 2020
	CSP Bypass - Dangling markup	1% 1835	45		CanardMandarin		1	27 October 2020
	CSP Bypass - Dangling markup 2	1% 1519	50		CanardMandarin		1	27 October 2020
	XSS DOM Based - Introduction	2% 6346	35		Ruulian		4	12 August 2021
	XSS DOM Based - Filters Bypass	1% 1586	50		Ruulian		7	12 August 2021
	XSS DOM Based - Eval	1% 3081	40		Ruulian		5	12 August 2021
	XSS DOM Based - AngularJS	1% 2746	40		Ruulian		3	12 August 2021
	Web Socket - 0 protection	1% 950	35		Worty		1	22 October 2021
	CSS - Exfiltration	1% 679	50		Forgi , gwel		1	8 April 2022
	CSP Bypass - Nonce	1% 1103	50		Ruulian		4	8 April 2022
	DOM Clobbering	1% 411	60		Mizu		1	8 April 2022
	XS Leaks	1% 199	75		Mizu		1	8 April 2022
	Javascript - Obfuscation 6	1% 121	60		n3rada		0	27 April 2023
	AST - Deobfuscation	1% 2015	35		mhoste , Lxt3h		2	27 June 2023
	CSP Bypass - Nonce 2	1% 630	35		Ruulian		1	27 June 2023
	Relative Path Overwrite	1% 189	50		Mizu		1	28 July 2023
	Browser - bfcache / disk cache	1% 66	65		Mizu		0	28 July 2023
	Same Origin Method Execution	1% 45	90		Mizu		0	28 July 2023
	Self XSS - Race Condition	1% 102	60		Mizu		1	28 July 2023
	Self XSS - DOM Secrets	1% 260	55		Mizu		3	28 July 2023
	CSPT - The Ruler	1% 55	60		Rolix , Mizu		0	27 September 2024

Challenge Results

Pseudo	Challenge	Lang	Date
awilfried1	Javascript - Obfuscation 1		2 June 2025 at 14:39
Rattus_digitalis	AST - Deobfuscation		2 June 2025 at 14:39
yessine ben taher	HTML - disabled buttons		2 June 2025 at 14:37
Quantitatif	Javascript - Obfuscation 4		2 June 2025 at 14:27
Sk0rp.exe	Flash - Authentication		2 June 2025 at 14:25
Apasize	XSS - Stockée 1		2 June 2025 at 14:24
awilfried1	Javascript - Authentification 2		2 June 2025 at 14:05
Apasize	XSS - Stockée 2		2 June 2025 at 14:05
Harbane	Javascript - Source		2 June 2025 at 13:54
Sk0rp.exe	XSS DOM Based - AngularJS		2 June 2025 at 13:49