Web - Client

Client-side technologies implemented in the web browser

At first you will be faced with problems that will require little to no knowledge of web scripting language. Pretty soon the plot thickens ...

These challenges confront you to the use of scripting languages and client-side programming. They are mostly scripts to analyze and understand. This will allow you to learn languages which are in widespread use on the internet.

Prerequisites:
– Understanding a scripting language such javascript/vbscript
– Understanding the operation of a debugger such firebug/javascript console

42 Challenges

Results	Name	Validations	Number of points	Difficulty	Author	Note	Solution	Date
	HTML - disabled buttons	44% 159776	5		Final		10	16 July 2017
	Javascript - Authentication	46% 167896	5		g0uZ		9	8 October 2006
	Javascript - Source	44% 158807	5		g0uZ		5	7 October 2006
	Javascript - Authentication 2	41% 146637	10		na5sim		4	3 February 2011
	Javascript - Obfuscation 1	38% 138890	10		Hel0ck		10	7 October 2006
	Javascript - Obfuscation 2	33% 120166	10		Hel0ck		8	3 February 2011
	Javascript - Native code	25% 89016	15		g0uZ		8	13 March 2011
	Javascript - Webpack	8% 28285	15		CanardMandarin		3	11 August 2020
	Javascript - Obfuscation 3	18% 65562	30		Hel0ck		10	4 February 2011
	XSS - Stored 1	12% 42154	30		g0uZ		10	3 March 2012
	AST - Deobfuscation	1% 2136	35		mhoste , Lxt3h		2	27 June 2023
	CSP Bypass - Inline code	2% 6011	35		CanardMandarin		8	27 October 2020
	CSP Bypass - Nonce 2	1% 650	35		Ruulian		1	27 June 2023
	CSRF - 0 protection	6% 21370	35		sambecks		8	16 February 2016
	Web Socket - 0 protection	1% 956	35		Worty		1	22 October 2021
	XSS DOM Based - Introduction	2% 6441	35		Ruulian		4	12 August 2021
	Flash - Authentication	2% 6518	40		koma		1	18 June 2012
	XSS DOM Based - AngularJS	1% 2801	40		Ruulian		3	12 August 2021
	XSS DOM Based - Eval	1% 3128	40		Ruulian		5	12 August 2021
	CSP Bypass - Dangling markup	1% 1862	45		CanardMandarin		1	27 October 2020
	CSP Bypass - JSONP	1% 1492	45		CanardMandarin		5	27 October 2020
	CSRF - token bypass	3% 7599	45		sambecks		8	18 February 2016
	XSS - Reflected	2% 6639	45		pickle		6	16 March 2018
	CSP Bypass - Dangling markup 2	1% 1537	50		CanardMandarin		1	27 October 2020
	CSP Bypass - Nonce	1% 1130	50		Ruulian		4	8 April 2022
	CSS - Exfiltration	1% 689	50		Forgi , gwel		1	8 April 2022
	Javascript - Obfuscation 4	2% 7072	50		aaSSfxxx		5	18 July 2011
	Relative Path Overwrite	1% 201	50		Mizu		1	28 July 2023
	XSS - Stored 2	3% 9768	50		g0uZ		7	4 March 2012
	XSS DOM Based - Filters Bypass	1% 1614	50		Ruulian		7	12 August 2021
	Self XSS - DOM Secrets	1% 267	55		Mizu		3	28 July 2023
	CSPT - The Ruler	1% 65	60		Rolix , Mizu		0	27 September 2024
	DOM Clobbering	1% 422	60		Mizu		1	8 April 2022
	Javascript - Obfuscation 6	1% 124	60		n3rada		0	27 April 2023
	Self XSS - Race Condition	1% 106	60		Mizu		1	28 July 2023
	Browser - bfcache / disk cache	1% 68	65		Mizu		0	28 July 2023
	HTTP Response Splitting	1% 2479	70		Arod		3	7 November 2013
	Javascript - Obfuscation 5	1% 816	70		Hel0ck		3	4 February 2011
	XS Leaks	1% 202	75		Mizu		1	8 April 2022
	XSS - Stored - filter bypass	1% 1586	80		Arod , sambecks		8	2 January 2016
	XSS - DOM Based	1% 876	85		vic		6	24 December 2016
	Same Origin Method Execution	1% 47	90		Mizu		0	28 July 2023

Challenge Results

Pseudo	Challenge	Lang	Date
Trucmuche	Javascript - Source		30 June 2025 at 16:42
Stf	Javascript - Authentification		30 June 2025 at 16:41
Stf	Javascript - Source		30 June 2025 at 16:40
antoun	XSS DOM Based - Introduction		30 June 2025 at 16:38
Flixbad	HTML - boutons désactivés		30 June 2025 at 16:38
Stf	HTML - boutons désactivés		30 June 2025 at 16:38
temp-user	HTML - boutons désactivés		30 June 2025 at 16:35
Trucmuche	HTML - boutons désactivés		30 June 2025 at 16:34
1213	Javascript - Authentication		30 June 2025 at 16:30
thib	HTML - boutons désactivés		30 June 2025 at 16:25