🔗 URL Fragment Viewer

Interactive tool to inspect and display URL hash fragments

🎯 Difficulty: Easy 🧩 DOM XSS # Fragment Based

What is a URL Fragment?

A URL fragment (also called a hash) is the part of the URL that comes after the # symbol. It's commonly used for navigation within a page.

Example: In https://example.com/page#section1, the fragment is section1.

Current URL Fragment

Hash Content (after #):
No fragment detected. Try adding #something to the URL!

Try These Examples

Basic Fragment
#hello-world
With Spaces
#hello world
Special Characters
#test@example.com
HTML Entities
#<bold>text</bold>

💡 Challenge

Your Mission

  • Find a way to execute JavaScript through the URL fragment
  • Trigger the flag validation mechanism
  • The flag is stored server-side and will be revealed upon successful exploitation
  • Pay attention to how the application handles different hash values

Technical Details

  • The fragment is read from location.hash
  • Content is displayed using DOM manipulation
  • Think about HTML rendering behavior
  • Some tags need user interaction to execute

🔐 Security Lab - DOM-based XSS via location.hash

This tool helps developers understand URL fragment handling