A 16-Level XSS Challenge, held in summer 2014 (plus one hidden level)

Post by coconutrandom » Thu, Oct 09, 2014, 6:35 PM UTC

Post by jaredmcdonald » Thu, Oct 09, 2014, 8:17 PM UTC

christianmann wrote: post #2

Is there a link to the puzzles without the solutions?

Post by [deleted] » Thu, Oct 09, 2014, 11:53 PM UTC

pxndx wrote: post #4

On level 4, it is assumed that the attacker owns a domain name. Given solutions use 2 unicode characters for the domain name, totalling 6 bytes. The actual shortest domain name in use is 'uz' ( http://uz/ ) which is a registrar for .uz, Uzbekistan's ccTLD, making the answer shorter by 4 bytes.