Forum Discussion

SCepparulo's avatar
SCepparulo
Icon for Bronze I rankBronze I
5 months ago

Course Secure Testing: XSS

How to log in site DETAIL_OF_ISSUE: https://hyperion.corp/forgot_password login info is not provided
application security
KieranRowley's avatar
KieranRowley
Icon for Community Manager rankCommunity Manager
5 months ago

Hi SCepparulo - apologies, your post was caught in the spam filter.

You do not have to log in to the website. Just follow the information in the browser tab and use the payloads in the text box displayed in the Browser Tab at the top of the lab.

  • rw3544's avatar
    rw3544
    Icon for Bronze I rankBronze I
    2 months ago

    The information in the browser tab is incomplete.  I have been usng GPT for two hours to solve this easter egg hunt and the methods of xss are not included in your instructions.  

    • netcat's avatar
      netcat
      Icon for Silver III rankSilver III
      2 months ago

      Read the briefing. Try payload 1.
      You'll see, there's no password needed to have fun.

    • netcat's avatar
      netcat
      Icon for Silver III rankSilver III
      2 months ago

      Really, read the briefing and try the 1st payload mentioned there.