Forum Discussion

SCepparulo's avatar
SCepparulo
Bronze I
11 months ago
Solved

Course Secure Testing: XSS

How to log in site DETAIL_OF_ISSUE: https://hyperion.corp/forgot_password login info is not provided
application security
  • netcat's avatar
    netcat
    8 months ago

    Read the briefing. Try payload 1.
    You'll see, there's no password needed to have fun.

rw3544's avatar
rw3544
Bronze I
8 months ago

The information in the browser tab is incomplete.  I have been usng GPT for two hours to solve this easter egg hunt and the methods of xss are not included in your instructions.  

netcat's avatar
netcat
Icon for Advocate rankAdvocate
8 months ago

Read the briefing. Try payload 1.
You'll see, there's no password needed to have fun.