The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

XSS redirect on click button "go to exploit server"

Arthur | Last updated: Mar 23, 2021 03:52PM UTC

Hi, I'm a security information student, and I have studied through the PortSwigger academy. When exploring the lab "Lab: Reflected XSS into HTML context with all tags blocked except custom ones", a bug appens. After click in store the body of my submision, the button "go to exploit server" redirect-me to the link that I chose. the body is : <script> window.location.href = "https://my-lab-id.web-security-academy.net/?search=%3Ca2+id%3D%22a%22+onfocus%3Dalert%28document.cookie%29+tabindex%3D1+id%3Dx+autofocus%3ELINK%3C%2Fa2%3E"; </script>

Uthman, PortSwigger Agent | Last updated: Mar 23, 2021 04:57PM UTC