Skip to main content

Posts

Showing posts with the label Main 5

Hack This Site.co.uk - Main 5

Hack This Site.co.uk - Main 5 Objectives ​Slightly more complicated JavaScript this time, but just as insecure. Refresh to try again. Solution this time when the site loads we get a Javascript window prompting for a password. if we cancel or enter the wrong password we get this cute picture of a kitty being sad so lets check the source again </div>             <div class='level-form'>          <script language="JavaScript" type="text/javascript">             var pass;             pass=prompt("Password","");             if (pass=="9286jas") {                 window.location.href="/levels/main/5?pass=9286jas";             }         </script>         <div class='center'>             <img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvGBPBtJiCEkp4WDtZlWB4Kuax7cBmpbwuhPT04j-aHv4deuXNlWtf_FTH4rlHYtZ8e-Ylo2zeVwKo86DgQ7Qhe41vKcBTPNmZ9F7Z7X0mkwVxaVXHwt