HTTP Response Splitting

70 Points  

Old vulnerability... but powerful !

Author

Arod,  

Level  Difficulty

Validations

401 Challengers 1%

Note  Notation

1
2
3
4
5
83 Votes
To reach this part of the site please login

Solution 1 Solution

Display solutions Submit a solution

Challenge Results Challenge Results

Pseudo Challenge Lang date
trykerdombre   HTTP Response Splitting fr 15 February 2019 at 17:13
Juxo   HTTP Response Splitting fr 14 February 2019 at 16:09
2dmbp   HTTP Response Splitting en 13 February 2019 at 07:16
8arcly   HTTP Response Splitting en 12 February 2019 at 20:50
Moindjaro   HTTP Response Splitting fr 12 February 2019 at 11:25
CuteAlternative   HTTP Response Splitting fr 7 February 2019 at 16:35
sidrana   HTTP Response Splitting fr 4 February 2019 at 18:55
Ipalm   HTTP Response Splitting fr 3 February 2019 at 23:39
Zarbibi   HTTP Response Splitting fr 26 January 2019 at 16:21
deltaclock   HTTP Response Splitting en 24 January 2019 at 00:06

Challenges associated with this section 19 Challenges

Results Challenge's Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution
pas_valide HTML - disabled buttons 27% 31531 5 Final 7
pas_valide Javascript - Authentication 43% 50779 5 g0uZ 8
pas_valide Javascript - Source 41% 48974 5 g0uZ 4
pas_valide Javascript - Authentication 2 37% 43726 10 na5sim 3
pas_valide Javascript - Obfuscation 1 36% 42747 10 Hel0ck 7
pas_valide Javascript - Obfuscation 2 31% 36814 10 Hel0ck 6
pas_valide Javascript - Native code 21% 24967 15 g0uZ 5
pas_valide Javascript - Obfuscation 3 17% 20197 30 Hel0ck 6
pas_valide XSS - Stored 1 10% 11622 30 g0uZ 8
pas_valide CSRF - 0 protection 5% 5919 35 sambecks 7
pas_valide Flash - Authentication 3% 2440 40 koma 1
pas_valide CSRF - token bypass 2% 1773 45 sambecks 7
pas_valide XSS - Reflected 1% 661 45 pickle 3
pas_valide Javascript - Obfuscation 4 3% 2613 50 aaSSfxxx 3
pas_valide XSS - Stored 2 3% 3012 50 g0uZ 5
pas_valide HTTP Response Splitting 1% 401 70 Arod 1
pas_valide Javascript - Obfuscation 5 1% 319 70 Hel0ck 3
pas_valide XSS - Stored - filter bypass 1% 456 80 Arod, sambecks 4
pas_valide XSS - DOM Based 1% 202 85 vic 4