frncscrlnd's writeups

Writeups from challenges and CTFs i take part in.

---

Project maintained by frncscrlnd Hosted on GitHub Pages — Theme by mattgraham

Stage 5

What you have to do:
Inject the following JavaScript command: alert(document.domain);

Hint: length limited text box.

While looking thtough the code we notice that the textbox has a maxlength attribute set to 15:

Let’s change that back to a useful value:

We’ll now deliver the payload through this textbox as we did for Stage 2: "><script>alert(document.domain)</script>.