XSS Challenge Problem Solving ideas (1-3)

Challenge1:

In a very basic way, as follows:

After submitting the successful pop-up window, complete.

Challenge2

This time we found that what we entered was put into the value= "", so we need to close the previous structure, and construct the following:

"><script>alert (document.domain) </script>"

OK, success, then next.

Challenge3

Try it first, construct "</b><script>alert (document.domain) </script><b>"

After submission, I found that HTML code became &quot; &lt;/b&gt; &lt;script&gt;alert (document.domain)&lt;/script&gt; &lt;b&gt; &quot;

This can be found that the Web page to our input of the basic filter, "into a &quot; And < turned into &lt; .

So, direct input is not possible, we can try to encode the script (because it does not filter \), after the code execution, the popup window succeeds.

XSS Challenge Problem Solving ideas (1-3)