Hacking Insights by Max Bautista

Full Stack Conf writeup

Challenge name: Full Stack Conf

Difficulty: Easy

Challenge Scenario: Welcome to Full Stack Conf, explore the future of JavaScript with a lineup of industry professionals and discover new techniques to advance your career as a web developer. But be very careful with the stay up to date form, we don’t sanitize anything and the admin logs in and checks the emails regularly, don’t try anything funny!! 😅

Link: https://app.hackthebox.com/challenges/Full%2520Stack%2520Conf?tab=play_challenge

Machine IP: 154.57.164.80:30664

It brings me to a website and at the bottom it gives us a hint.

Did a bit of testing with alert(). I was able to get the flag with:

<img src=x onerror=alert(1)>

GG