Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: Exploiting cross-site scripting to capture passwords problems

Garth | Last updated: Jul 24, 2024 09:52PM UTC

Hi, The provided solution will trigger DNS requests that my collaborator sees. However, the lab will not trigger the HTTP request. I have confirmed that the collaborator will see http requests when I test the collaborator url with a browser, however the provided solution does not appear to trigger the HTTP Request. I have reviewed the solution as it appears in the response in developer tools and it appears as expected. I have also tried with a new lab. Any suggestions?

Garth | Last updated: Jul 24, 2024 11:17PM UTC

After the third separate lab machine attempt it did work. It appears that the lab machines are unstable. This is disconcerting as many who are trying to learn don't if its the machine or their attempts.

Ben, PortSwigger Agent | Last updated: Jul 25, 2024 07:37AM UTC