2020-12-07-DVWA之JavaScript

JavaScript

low

<?php
$page[ 'body' ] .= <<<EOF
<script>
	function rot13(inp) {
        return inp.replace(/[a-zA-Z]/g,function(c){return String.fromCharCode((c<="Z"?90:122)>=(c=c.charCodeAt(0)+13)?c:c-26);});
    }

    function generate_token() {
        var phrase = document.getElementById("phrase").value;
        document.getElementById("token").value = md5(rot13(phrase));
    }

    generate_token();
</script>
EOF;
?>

首先根据提示输入 success，提示token不对

查看页面源码