Скачать или смотреть Portswigger - XSS - Lab #2 Stored XSS into HTML context with nothing encoded

Hello Hackers, in this video of Stored XSS into HTML context with nothing encoded will see how to exploit, discover and find senstive information based on application Cross-Site Scripting to leak for potential attacks from Burp Suite in a lab from Web Security Academy powered by Portswigger

⚠️ Subscribe to my channel ➡️ @popo_hack ⚠️

0:00 - About the Lab
1:08 - Discover the blog
1:48 - Test comment inputs

🔍 About the Lab
Lab: Reflected XSS into HTML context with nothing encoded
Level: Apprentice
This lab contains a stored cross-site scripting vulnerability in the comment functionality.
To solve this lab, submit a comment that calls the alert function when the blog post is viewed.

✅ What to do ?
1. Enter the following into the comment box:
use script tag contains alert() function

2. Enter a name, email and website.

3. Click "Post comment".

4. Go back to the blog.

Thank you for watching my video, if you have any questions or any topics recommendation feel free to write them on the comment below 🙋

#WebSecurityAcademy #portswigger #vulnerability