DEV Community

Discussion on: Hacker101 CTF - Micro-CMS v1

Collapse
 
prajwalmithun profile image
vanquisher

Flag 1 another approach.

You need to do XSS.

       1. You need to go to Create new page.  
       2. Add this <script>alert(100)</script> in both the title and 
          description section, since these are the input entry points,xss should be done in those points. And the number 100 may be any number. 
       3. Click <--go-Home.
Enter fullscreen mode Exit fullscreen mode

Walla!! you get the flag in the pop up

Collapse
 
onyxcode profile image
Dan

Thank you so much! I was stuck on the explanation given for Flag1 :)