HTTP Response Splitting

70 Points  

Old vulnerability... but powerful !

Author

Arod,  

Level  Difficulty

Validations

335 Challengers 1%

Note  Notation

1
2
3
4
5
76 Votes
To reach this part of the site please login

Solution 1 Solution

Display solutions Submit a solution

Challenge Results Challenge Results

Pseudo Challenge Lang date
adfgvx   HTTP Response Splitting fr 14 August 2018 at 00:43
Tn_Scorpion   HTTP Response Splitting en 4 August 2018 at 16:17
n_chamaa   HTTP Response Splitting fr 4 August 2018 at 00:42
switch   HTTP Response Splitting fr 17 July 2018 at 22:08
DrStache   HTTP Response Splitting fr 12 July 2018 at 12:44
TontonPE   HTTP Response Splitting fr 12 July 2018 at 10:09
TraaaxX   HTTP Response Splitting fr 9 July 2018 at 11:46
Smoke   HTTP Response Splitting fr 8 July 2018 at 20:13
gwel   HTTP Response Splitting fr 8 July 2018 at 20:10
Redouane   HTTP Response Splitting fr 5 July 2018 at 12:56

Challenges associated with this section 19 Challenges

Results Challenge's Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution
pas_valide HTML - disabled buttons 21% 19399 5 Final 7
pas_valide Javascript - Authentication 43% 39590 5 g0uZ 7
pas_valide Javascript - Source 42% 38254 5 g0uZ 4
pas_valide Javascript - Authentication 2 37% 33923 10 na5sim 2
pas_valide Javascript - Obfuscation 1 37% 33390 10 Hel0ck 5
pas_valide Javascript - Obfuscation 2 32% 28789 10 Hel0ck 5
pas_valide Javascript - Native code 22% 19637 15 g0uZ 5
pas_valide Javascript - Obfuscation 3 18% 15880 30 Hel0ck 5
pas_valide XSS - Stored 1 10% 9102 30 g0uZ 7
pas_valide CSRF - 0 protection 5% 4487 35 sambecks 6
pas_valide Flash - Authentication 3% 2036 40 koma 1
pas_valide CSRF - token bypass 2% 1385 45 sambecks 6
pas_valide XSS - Reflected 1% 303 45 pickle 3
pas_valide Javascript - Obfuscation 4 3% 2236 50 aaSSfxxx 1
pas_valide XSS - Stored 2 3% 2351 50 g0uZ 4
pas_valide HTTP Response Splitting 1% 334 70 Arod 1
pas_valide Javascript - Obfuscation 5 1% 275 70 Hel0ck 3
pas_valide XSS - Stored - filter bypass 1% 371 80 Arod, sambecks 4
pas_valide XSS - DOM Based 1% 151 85 vic511 2