Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Issues on the proposed solution to Lab: Forced OAuth profile linking

Abhi | Last updated: Sep 26, 2024 08:28AM UTC

I have tried both iframe and img tabs in burp's browser and others. I have tried switching to incognito, but that doesn't help either. I have tried multiple ways to deliver the payload, but it seems like the user doesn't visit the link as I can't see the admin panel. I do store the payload every time before delivering it to the victim. Please help! Payloads: 1. <iframe src="https://0a430063042db3a480319417000700f4.web-security-academy.net/oauth-linking?code=2rOZULdXls33S84_5iVtu_phzi3LrBdvm7_ByxYWrPV"></iframe> 2.<img src="https://0a430063042db3a480319417000700f4.web-security-academy.net/oauth-linking?code=2rOZULdXls33S84_5iVtu_phzi3LrBdvm7_ByxYWrPV">

Abhi | Last updated: Sep 26, 2024 09:30PM UTC