Burp Suite User Forum

Login to post

Lab: Stored XSS into anchor href attribute with double quotes HTML-encoded

David | Last updated: Jul 29, 2020 11:45PM UTC

Hi! The lab does not register the fact that XSS has executed and means I cannot complete the challenge. javascript:alert(document.domain) successfully pops up however the website does not register this fact, which means that I cannot complete the challenge. Many thanks, David

David | Last updated: Jul 29, 2020 11:49PM UTC

Nevermind, I completed it without the use of burp, however using burp seems to somehow fix the issue I was having by following the redirection.

You need to Log in to post a reply. Or register here, for free.