Skip to content

Instantly share code, notes, and snippets.

View carlosvillasanchez's full-sized avatar
🔨
Fuzzing...

Carlos Villa Sánchez carlosvillasanchez

🔨
Fuzzing...
12 followers · 22 following
View GitHub Profile
@carlosvillasanchez
carlosvillasanchez / challenge-3.js
Last active October 30, 2021 10:16
<div id="html" class="text">
<h1 class="light">
</h1>
</div>
<div id="intigriti">
<div id="last">
<script>
<div class="a">
(...)
@carlosvillasanchez
carlosvillasanchez / challenge-2.html
Last active October 30, 2021 10:16
<div id="html" class="text">
<h1 class="light">
</h1>
</div>
<div id="intigriti">
<div class="a">'"</div>
<div id="container">
<span>I</span>
@carlosvillasanchez
carlosvillasanchez / challenge.html
Last active October 30, 2021 10:16
<div id="html" class="text">
<h1 class="light">
INPUT
<div class="a">'"</div>
<div id="container">
<span>I</span>
<span>I</span>
</div>
@carlosvillasanchez
carlosvillasanchez / challenge-code-variable-names.js
Created October 30, 2021 09:18
window.addEventListener("DOMContentLoaded", function () {
jsCode = `)]}'` + new URL(location.href).searchParams.get("xss");
lastElementOfBody = document.getElementById("body").lastElementChild;
if (lastElementOfBody.id === "intigriti") {
lastElementOfIntigriti = lastElementOfBody.lastElementChild;
htmlOfLastElementOfIntigriti = lastElementOfIntigriti.innerHTML.trim();
jsPrefix = htmlOfLastElementOfIntigriti.substr(htmlOfLastElementOfIntigriti.length - 4);
jsCode = jsPrefix + jsCode;
}
let scriptTag = document.createElement("script");
@carlosvillasanchez
carlosvillasanchez / challenge-code.js
Created October 30, 2021 09:04
window.addEventListener("DOMContentLoaded", function () {
e = `)]}'` + new URL(location.href).searchParams.get("xss");
c = document.getElementById("body").lastElementChild;
if (c.id === "intigriti") {
l = c.lastElementChild;
i = l.innerHTML.trim();
f = i.substr(i.length - 4);
e = f + e;
}
let s = document.createElement("script");
@carlosvillasanchez
carlosvillasanchez / gist:550bf17ba26d0dd06a8a7050998c1c8d
Created July 14, 2021 10:02
test
alert(1)