본문 바로가기

Web Security/webhacking.kr

[Webhacking.kr] old-16

old-16

This problem is in webhacking.kr.
URL: https://webhacking.kr/challenge/js-3//

If you enter the URL, you can see the below photo.

 

First, View Source

If you look at the code, you can see this part.

if(cd==124) location.href=String.fromCharCode(cd)+".php"; // do it!    

If you move the String.fromCharCode(cd)+".php";, you will solve the problem.
To get the value of "String.fromCharCode(124)", you can try to like this.

 

String.fromCharCode(124) -> "|"

If you enter this URL, you can solve the problem.

https://webhacking.kr/challenge/js-3/|.php   

'Web Security > webhacking.kr' 카테고리의 다른 글

[Webhacking.kr] old-18  (0) 2021.08.01
[Webhacking.kr] old-17  (0) 2021.08.01
[Webhacking.kr] old-14  (0) 2021.08.01
[Webhacking.kr] old-13  (0) 2021.08.01
[Webhacking.kr] old-11  (0) 2021.08.01