Forum Discussion

netcat's avatar
netcat
Icon for Silver III rankSilver III
7 months ago
Solved

Human Connection Challenge: Season 1 – Web Exploitation - XSS

Question: Identify a reflected XSS vulnerability on the web application that reveals a token in the error message. There are a few forms on the web page: / -> submit reloads /, the attachment isn'...
help & support
  • edgarloredo's avatar
    edgarloredo
    7 months ago

    For the XSS, I would recommend you to test all of the available fields, one of them is the one and you should see the token in the same page, if it redirects to the main page, then that was not the correct field. Tip, try your script in all the fields at the same time!

    Directory Traversal, you need to find a url with something like /test?field=something.txt, this could be an indicate of path traversal.

    For SQL, only extract data is possible no modifications are allowed.

netcat's avatar
netcat
Icon for Silver III rankSilver III
7 months ago

Having solved the XSS: Really a rabbit hole.

  • miclib's avatar
    miclib
    Icon for Bronze II rankBronze II
    7 months ago

    Every lab has to have at least one. Otherwise they'd be boring. 

    For me, to crawl out, I read an article about reflective XSS where it mentioned the types of urls to look for, in order to find a compromise. Burpsuite happened to be open and there it was staring me in the face. Doh.