Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

solving labs

Matias | Last updated: Sep 16, 2020 11:33AM UTC

Hi I am trying to solve some of the web caching labs. I manage to poison the cache, get an alert to show up but the lab never solves. For example, I am working on: "Web cache poisoning via an unkeyed query string" I have sent the request: GET /?test=1'><script>alert(1)</script>--' HTTP/1.1 and receive a response with <link rel="canonical" href='//ac2c1ff01e08856a801d341400f700af.web-security-academy.net/?test=1'><script>alert(1)</script>--'&fcbz=1'/> This seems correct, and it shows an alert when I go to the home page on my browser. However, the lab never completes. This has been happening for now three labs. Am I doing something incorrectly? or is it something else? I am using Burp suite community version, with Firefox 79.0 Regards, Matias

Uthman, PortSwigger Agent | Last updated: Sep 17, 2020 10:00AM UTC