HTTP Response Splitting

70 Points  

Old vulnerability... but powerful !

Author

Arod,  

Level  Difficulty

Validations

374 Challengers 1%

Note  Notation

1
2
3
4
5
79 Votes
To reach this part of the site please login

Solution 1 Solution

Display solutions Submit a solution

Challenge Results Challenge Results

Pseudo Challenge Lang date
HTLL   HTTP Response Splitting en 10 December 2018 at 12:32
M@c4im   HTTP Response Splitting en 8 December 2018 at 17:19
Sudo   HTTP Response Splitting en 1 December 2018 at 16:37
blackdog   HTTP Response Splitting en 26 November 2018 at 06:41
RemY_DeV   HTTP Response Splitting fr 21 November 2018 at 13:55
3vils   HTTP Response Splitting fr 21 November 2018 at 08:04
133720   HTTP Response Splitting fr 20 November 2018 at 03:49
maloz   HTTP Response Splitting fr 19 November 2018 at 10:52
galadac   HTTP Response Splitting fr 19 November 2018 at 10:15
stan   HTTP Response Splitting fr 16 November 2018 at 08:53

Challenges associated with this section 19 Challenges

Results Challenge's Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution
pas_valide HTML - disabled buttons 25% 25570 5 Final 7
pas_valide Javascript - Authentication 43% 45150 5 g0uZ 8
pas_valide Javascript - Source 42% 43601 5 g0uZ 4
pas_valide Javascript - Authentication 2 37% 38888 10 na5sim 2
pas_valide Javascript - Obfuscation 1 36% 38149 10 Hel0ck 6
pas_valide Javascript - Obfuscation 2 32% 32950 10 Hel0ck 5
pas_valide Javascript - Native code 22% 22523 15 g0uZ 5
pas_valide Javascript - Obfuscation 3 18% 18288 30 Hel0ck 6
pas_valide XSS - Stored 1 10% 10526 30 g0uZ 8
pas_valide CSRF - 0 protection 5% 5285 35 sambecks 7
pas_valide Flash - Authentication 3% 2242 40 koma 1
pas_valide CSRF - token bypass 2% 1600 45 sambecks 7
pas_valide XSS - Reflected 1% 505 45 pickle 3
pas_valide Javascript - Obfuscation 4 3% 2445 50 aaSSfxxx 2
pas_valide XSS - Stored 2 3% 2751 50 g0uZ 5
pas_valide HTTP Response Splitting 1% 374 70 Arod 1
pas_valide Javascript - Obfuscation 5 1% 303 70 Hel0ck 3
pas_valide XSS - Stored - filter bypass 1% 415 80 Arod, sambecks 4
pas_valide XSS - DOM Based 1% 182 85 vic511 3