DOM Clobbering, Prototype Pollution and XSS - "sanity" Walkthrough [Amateurs CTF 2023]
Автор: CryptoCat
Загружено: 2023-07-29
Просмотров: 3573
Video walkthrough for "sanity", a web challenge from Amateurs CTF 2023. The challenge involved DOM clobbering, prototype pollution and XSS. Write-ups/tutorials aimed at beginners - Hope you enjoy 🙂 #AmateursCTF #CTF #Pentesting #OffSec #WebSec
You can find my full write-up here: https://cryptocat.me/blog/ctf/2023/am... 🥰
↢Amateurs CTF↣
https://ctf.amateurs.team/challs
/ discord
👷♂️Resources🛠
https://cryptocat.me/resources
↢Chapters↣
0:00 Start
0:33 Explore functionality
1:35 Code review
5:15 Vulnerability chain breakdown
8:48 Browser issue detour
9:27 Attack plan
10:22 Step 1: Clobber the DOM
13:16 Step 2: Protoype Pollution
17:42 Step 3: XSS (steal cookie)
20:27 Recap
23:31 End
Доступные форматы для скачивания:
Скачать видео mp4
-
Информация по загрузке: