XSS Challenge Problem Solving ideas (4-7)

Challenge 4:

This input is still filtered, and the following drop-down menu is filtered, but we found that the source of name=p3 things, his content is not changed after submission, so, the value of "</input><script>alert" ( Document.domain) </script><input> "successful after submission.

Challenge 5: This is not filtered, but the text box has maxlength, from the original code to delete decisively. Then construct "</input><script>alert" </script><input> "popup Window success/." Challenge 6: This is a very interesting phenomenon, the input column "after the symbol of the content is taken out of the outside, and added to the filter." This allows us to take advantage of the Onmouse event of the text bar (because the content was taken out). Build the following input "onmouseover=" alert (document.domain), and when the mouse moves to the text bar, the popup window. Challenge 7: Like Challenge6, but we found it automatically added "", then remove the "" "in the Code onmouseover= Alert (document.domain) OK pop window success!

XSS Challenge Problem Solving ideas (4-7)