๋ณธ๋ฌธ ๋ฐ”๋กœ๊ฐ€๊ธฐ

XSS1

[dreamhack] xss-1 (web) https://dreamhack.io/wargame/challenges/28/ xss-1 ์—ฌ๋Ÿฌ ๊ธฐ๋Šฅ๊ณผ ์ž…๋ ฅ๋ฐ›์€ URL์„ ํ™•์ธํ•˜๋Š” ๋ด‡์ด ๊ตฌํ˜„๋œ ์„œ๋น„์Šค์ž…๋‹ˆ๋‹ค. XSS ์ทจ์•ฝ์ ์„ ์ด์šฉํ•ด ํ”Œ๋ž˜๊ทธ๋ฅผ ํš๋“ํ•˜์„ธ์š”. ํ”Œ๋ž˜๊ทธ๋Š” flag.txt, FLAG ๋ณ€์ˆ˜์— ์žˆ์Šต๋‹ˆ๋‹ค. Reference Client-side Basic dreamhack.io ์ด๋ฒˆ์—๋Š” XSS ์ทจ์•ฝ์ ์„ ์ด์šฉํ•ด ํ‘ธ๋Š” ๋ฌธ์ œ์ด๋‹ค XSS ์ทจ์•ฝ์ ์ด๋ž€? ๊ฒŒ์‹œํŒ์„ ํฌํ•จํ•œ ์›น์—์„œ ์ž๋ฐ”์Šคํฌ๋ฆฝํŠธ๊ฐ™์€ ์Šคํฌ๋ฆฝํŠธ ์–ธ์–ด๋ฅผ ์‚ฝ์ž…ํ•ด ๊ฐœ๋ฐœ์ž๊ฐ€ ์˜๋„ํ•˜์ง€ ์•Š์€ ๊ธฐ๋Šฅ์„ ์ž‘๋™์‹œํ‚ค๋Š”๊ฒƒ ์ถœ์ฒ˜ : https://kevinthegrey.tistory.com/36 2-2) XSS(Cross Site Scripting) ๊ณต๊ฒฉ๊ธฐ๋ฒ•, ์‹œํ์–ด ์ฝ”๋”ฉ Client-script language - HTML, jav.. 2021. 5. 24.

ํ‹ฐ์Šคํ† ๋ฆฌํˆด๋ฐ”