Web - Client

Client-side technologies implemented in the web browser

At first you will be faced with problems that will require little to no knowledge of web scripting language. Pretty soon the plot thickens ...

These challenges confront you to the use of scripting languages and client-side programming. They are mostly scripts to analyze and understand. This will allow you to learn languages which are in widespread use on the internet.

Prerequisites:
– Understanding a scripting language such javascript/vbscript
– Understanding the operation of a debugger such firebug/javascript console

41 Challenges

Results	Name ↓↑	Validations	Number of points	Difficulty	Author	Note	Solution	Date
	AST - Deobfuscation	1% 854	35		mhoste , Lxt3h		2	27 June 2023
	Browser - bfcache / disk cache	1% 29	65		Mizu		0	28 July 2023
	CSP Bypass - Dangling markup	1% 1507	45		CanardMandarin		1	27 October 2020
	CSP Bypass - Dangling markup 2	1% 1196	50		CanardMandarin		1	27 October 2020
	CSP Bypass - Inline code	2% 4806	35		CanardMandarin		8	27 October 2020
	CSP Bypass - JSONP	1% 1211	45		CanardMandarin		5	27 October 2020
	CSP Bypass - Nonce	1% 734	50		Ruulian		4	8 April 2022
	CSP Bypass - Nonce 2	1% 255	35		Ruulian		1	27 June 2023
	CSRF - 0 protection	6% 19270	35		sambecks		8	16 February 2016
	CSRF - token bypass	3% 6830	45		sambecks		8	18 February 2016
	CSS - Exfiltration	1% 513	50		Forgi , gwel		1	8 April 2022
	DOM Clobbering	1% 294	60		Mizu		1	8 April 2022
	Flash - Authentication	2% 6116	40		koma		1	18 June 2012
	HTML - disabled buttons	44% 141886	5		Final		10	16 July 2017
	HTTP Response Splitting	1% 2260	70		Arod		3	7 November 2013
	Javascript - Authentication	47% 151561	5		g0uZ		9	8 October 2006
	Javascript - Authentication 2	41% 132135	10		na5sim		4	3 February 2011
	Javascript - Native code	25% 80387	15		g0uZ		8	13 March 2011
	Javascript - Obfuscation 1	39% 125347	10		Hel0ck		10	7 October 2006
	Javascript - Obfuscation 2	34% 108252	10		Hel0ck		8	3 February 2011
	Javascript - Obfuscation 3	19% 59577	30		Hel0ck		10	4 February 2011
	Javascript - Obfuscation 4	2% 6428	50		aaSSfxxx		5	18 July 2011
	Javascript - Obfuscation 5	1% 767	70		Hel0ck		3	4 February 2011
	Javascript - Obfuscation 6	1% 73	60		n3rada		0	27 April 2023
	Javascript - Source	44% 143481	5		g0uZ		5	7 October 2006
	Javascript - Webpack	8% 23578	15		CanardMandarin		3	11 August 2020
	Relative Path Overwrite	1% 79	50		Mizu		0	28 July 2023
	Same Origin Method Execution	1% 20	90		Mizu		0	28 July 2023
	Self XSS - DOM Secrets	1% 171	55		Mizu		3	28 July 2023
	Self XSS - Race Condition	1% 54	60		Mizu		0	28 July 2023
	Web Socket - 0 protection	1% 797	35		Worty		1	22 October 2021
	XS Leaks	1% 169	75		Mizu		1	8 April 2022
	XSS - DOM Based	1% 809	85		vic		6	24 December 2016
	XSS - Reflected	2% 5642	45		pickle		6	16 March 2018
	XSS - Stored - filter bypass	1% 1365	80		Arod , sambecks		8	2 January 2016
	XSS - Stored 1	12% 36950	30		g0uZ		10	3 March 2012
	XSS - Stored 2	3% 8531	50		g0uZ		7	4 March 2012
	XSS DOM Based - AngularJS	1% 2043	40		Ruulian		3	12 August 2021
	XSS DOM Based - Eval	1% 2252	40		Ruulian		5	12 August 2021
	XSS DOM Based - Filters Bypass	1% 1198	50		Ruulian		6	12 August 2021
	XSS DOM Based - Introduction	2% 4886	35		Ruulian		4	12 August 2021

Challenge Results

Pseudo	Challenge	Lang	Date
CyrilBrulebois	Javascript - Native code		25 April 2024 at 19:53
Godea	Javascript - Native code		25 April 2024 at 19:43
zamaz	HTML - boutons désactivés		25 April 2024 at 19:40
clamulex	XSS DOM Based - AngularJS		25 April 2024 at 19:40
CyrilBrulebois	Javascript - Obfuscation 3		25 April 2024 at 19:39
Sergent	CSP Bypass - Inline code		25 April 2024 at 19:37
helmix	Javascript - Source		25 April 2024 at 19:33
clamulex	XSS - Stockée 2		25 April 2024 at 19:32
TheoTheGuest	Javascript - Obfuscation 1		25 April 2024 at 19:19
TheoTheGuest	Javascript - Authentication 2		25 April 2024 at 19:14