Re: Help with http://xss-quiz.int21h.jp

["Terra Frost" <terrafrost () gmail com>]

javascript:alert(document.domain);

I am curious, incidentally, as to what kind of XSS that would qualify
as.  It's kinda reflected in that the GET or POST request must contain
the payload, but it also requires user intervention.  Also, given the
nature of this XSS, I don't think you can even do clickjacking with
it.

On Tue, Nov 25, 2008 at 1:28 AM, Vin Oxious <vinoxious () gmail com> wrote:
> Hello Friends,
>
>                      I need help with the site :
> http://xss-quiz.int21h.jp based on XSS Challenge.. I am not able to
> figure out how to proceed any further at the stage :
>
> http://xss-quiz.int21h.jp/stage008.php?sid=c7bd38c2914d016b2be6c9adb9ef64b671d57e75
>
> If help would be appreciated
>
> thanks and regards
> Vinox