Skip to main content

Posts

Showing posts with the label Main 5

Hack This Site.co.uk - Main 5

Hack This Site.co.uk - Main 5 Objectives ​Slightly more complicated JavaScript this time, but just as insecure. Refresh to try again. Solution this time when the site loads we get a Javascript window prompting for a password. if we cancel or enter the wrong password we get this cute picture of a kitty being sad so lets check the source again </div>             <div class='level-form'>          <script language="JavaScript" type="text/javascript">             var pass;             pass=prompt("Password","");             if (pass=="9286jas") {                 window.location.href="/levels/main/5?pass=9286jas";             }         </script>         <div class='center'>        ...