HTTP Response Splitting

70 Points  0x0

Old vulnerability... but powerful !

Author

Arod,  

Level  Difficulty

Validations

2269 Challengers 1%

Note  Notation

1
2
3
4
5
216 Votes

To reach this part of the site please login

solutions 3 Solutions

Display solutions Submit a solution
You should validate this challenge first

Challenge Results Challenge Results

Pseudo Challenge Lang Date
Kyoto Web - Client  HTTP Response Splitting fr 22 January 2024 at 00:02
barge_ellille Web - Client  HTTP Response Splitting fr 17 January 2024 at 20:48
PipouNolan Web - Client  HTTP Response Splitting fr 17 January 2024 at 18:37
Safa Bendaouia Web - Client  HTTP Response Splitting fr 14 January 2024 at 22:41
BabbouDream Web - Client  HTTP Response Splitting fr 14 January 2024 at 15:59
Lucas Web - Client  HTTP Response Splitting fr 13 January 2024 at 15:55
Assa Web - Client  HTTP Response Splitting fr 12 January 2024 at 23:18
Rastipwner Web - Client  HTTP Response Splitting fr 12 January 2024 at 10:38
pcquifume Web - Client  HTTP Response Splitting fr 11 January 2024 at 13:36
thnmm Web - Client  HTTP Response Splitting en 11 January 2024 at 08:18

challenges 41 Challenges

Results Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution Date
pas_valide HTML - disabled buttons 44% 142010 5 Final 10 16 July 2017
pas_valide Javascript - Authentication 47% 151670 5 g0uZ 9 8 October 2006
pas_valide Javascript - Source 44% 143585 5 g0uZ 5 7 October 2006
pas_valide Javascript - Authentication 2 41% 132223 10 na5sim 4 3 February 2011
pas_valide Javascript - Obfuscation 1 39% 125444 10 Hel0ck 10 7 October 2006
pas_valide Javascript - Obfuscation 2 34% 108337 10 Hel0ck 8 3 February 2011
pas_valide Javascript - Native code 25% 80456 15 g0uZ 8 13 March 2011
pas_valide Javascript - Webpack 8% 23630 15 CanardMandarin 3 11 August 2020
pas_valide Javascript - Obfuscation 3 19% 59638 30 Hel0ck 10 4 February 2011
pas_valide XSS - Stored 1 12% 36982 30 g0uZ 10 3 March 2012
pas_valide AST - Deobfuscation 1% 860 35 mhoste , Lxt3h 2 27 June 2023
pas_valide CSP Bypass - Inline code 2% 4813 35 CanardMandarin 8 27 October 2020
pas_valide CSP Bypass - Nonce 2 1% 258 35 Ruulian 1 27 June 2023
pas_valide CSRF - 0 protection 6% 19284 35 sambecks 8 16 February 2016
pas_valide Web Socket - 0 protection 1% 799 35 Worty 1 22 October 2021
pas_valide XSS DOM Based - Introduction 2% 4895 35 Ruulian