Burp Suite User Forum

Create new post

Lab: Stored XSS into anchor href attribute with double quotes HTML-encoded

David | Last updated: Jul 29, 2020 11:45PM UTC

Hi! The lab does not register the fact that XSS has executed and means I cannot complete the challenge. javascript:alert(document.domain) successfully pops up however the website does not register this fact, which means that I cannot complete the challenge. Many thanks, David

David | Last updated: Jul 29, 2020 11:49PM UTC

Nevermind, I completed it without the use of burp, however using burp seems to somehow fix the issue I was having by following the redirection.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.