Spaces:
Sleeping
Sleeping
| { | |
| "team_role": "red", | |
| "module": "xss", | |
| "vuln_type": "reflected", | |
| "title": "Reflected XSS in CloudWave search", | |
| "story": "نموذج بحث في CloudWave يعكس مدخلات المستخدم في الصفحة بدون تصفية. استغل الثغرة لتنفيذ JavaScript.", | |
| "task_outline": "حقن payload في حقل البحث لجعل document.cookie يحتوي على السر.", | |
| "files": {}, | |
| "file_metadata": {}, | |
| "command_outputs": {}, | |
| "hints": [ | |
| "innerHTML هي الـ sink هنا.", | |
| "استخدم <script>alert(1)</script> لاختبار الحقن.", | |
| "السر يظهر في document.cookie بعد النجاح." | |
| ], | |
| "tools_whitelist": ["python", "python3"], | |
| "flag_hash": "SHA256_OF_CyberArena{...}", | |
| "flag_preview": "CyberArena{xss-reflected-001}", | |
| "difficulty": "متوسط", | |
| "xp_reward": 150, | |
| "html_preview": "<!DOCTYPE html><html>... vulnerable page ...</html>", | |
| "code_view": "<script>document.getElementById('out').innerHTML = new URLSearchParams(location.search).get('q') || ''</script>", | |
| "sink_type": "innerHTML", | |
| "validation_pattern": "(?i)(<\\s*script|onerror|javascript:)", | |
| "exploits_accepted": ["<script>alert(1)</script>", "<img src=x onerror=alert(1)>"], | |
| "secret_marker": "xss-secret-001" | |
| } | |