XSS - Reflected (POST) - Low Security Level

Solution:

*Note: I am using BurpSuite pre-configured browser, in case if you are not using the pre-configured browser then please configure the browser with proxy and then follow the below steps.

Step 1. Give inputs of your choice in the FirstName and LastName text fields, click on go and pass the request through BurpSuite.


Replace the FirstName & LastName inputs with below details:


Note: As Angled brackets aren't allowed in YouTube Description, replacing them with ( )
(script)alert(document.cookie)(/script)
(script)alert("PseudoTime")(/script)

Step 2. Forward the request, visit the lesson page and check the results.

* You can explore this lesson with other XSS cheat sheet codes.

PseudoTime

свернуть