본문 바로가기
웹 해킹/webhacking.kr

webhacking.kr 20번

by sonysame 2018. 2. 10.

소스코드는 다음과 같다.

<html>
<head>
<title>Challenge 20</title>
<style type="text/css">
body { background:black; color:white; font-size:10pt; }
input { background:silver; color:black; font-size:9pt; }
</style>
</head>
<body>
<center><font size=2>time limit : 2</font></center>
<form name=lv5frm method=post>
<table border=0>
<tr><td>nickname</td><td><input type=text name=id size=10 maxlength=10></td></tr>
<tr><td>comment</td><td><input type=text name=cmt size=50 maxlength=50></td></tr>
<tr><td>code</td><td><input type=text name=hack><input type=button name=attackme value="btmqtmlwxi"
style=border:0;background=lightgreen onmouseover=this.style.font=size=30 onmouseout=this.style.font=size=15></td></tr>
<tr><td><input type=button value="Submit" onclick=ck()></td><td><input type=reset></td></tr>
</table>
<script>
function ck()
{

if(lv5frm.id.value=="") { lv5frm.id.focus(); return; }
if(lv5frm.cmt.value=="") { lv5frm.cmt.focus(); return; }
if(lv5frm.hack.value=="") { lv5frm.hack.focus(); return; }
if(lv5frm.hack.value!=lv5frm.attackme.value) { lv5frm.hack.focus(); return; }

lv5frm.submit();

}
</script>

<br>

do not programming!<br>

this is javascript challenge

</body>

</html>

lv5from.hack.value과 lv5frm.attackme.value가 같아야 하는데!

2초마다 바뀌므로 타자로 치기는 불가능하다.


따라서, 콘솔창을 이용했다!


lv5frm.id.value="a"

lv5frm.cmt.value="b"

lv5frm.hack.value=lv5frm.attackme.value

lv5frm.submit()





'웹 해킹 > webhacking.kr' 카테고리의 다른 글

webhacking.kr 33번  (0) 2018.02.11
webhacking.kr 23번-XSS  (0) 2018.02.10
webhacking.kr 47번  (0) 2018.02.10
webhacking.kr 58번  (0) 2018.02.10
webhacking.kr 32번-파이썬 스크립트  (0) 2018.02.10