Spaces:
Sleeping
Sleeping
File size: 1,276 Bytes
80a4a65 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 | {
"team_role": "red",
"module": "xss",
"vuln_type": "reflected",
"title": "Reflected XSS in CloudWave search",
"story": "نموذج بحث في CloudWave يعكس مدخلات المستخدم في الصفحة بدون تصفية. استغل الثغرة لتنفيذ JavaScript.",
"task_outline": "حقن payload في حقل البحث لجعل document.cookie يحتوي على السر.",
"files": {},
"file_metadata": {},
"command_outputs": {},
"hints": [
"innerHTML هي الـ sink هنا.",
"استخدم <script>alert(1)</script> لاختبار الحقن.",
"السر يظهر في document.cookie بعد النجاح."
],
"tools_whitelist": ["python", "python3"],
"flag_hash": "SHA256_OF_CyberArena{...}",
"flag_preview": "CyberArena{xss-reflected-001}",
"difficulty": "متوسط",
"xp_reward": 150,
"html_preview": "<!DOCTYPE html><html>... vulnerable page ...</html>",
"code_view": "<script>document.getElementById('out').innerHTML = new URLSearchParams(location.search).get('q') || ''</script>",
"sink_type": "innerHTML",
"validation_pattern": "(?i)(<\\s*script|onerror|javascript:)",
"exploits_accepted": ["<script>alert(1)</script>", "<img src=x onerror=alert(1)>"],
"secret_marker": "xss-secret-001"
}
|