4 ms·
I completed the challenge. You don't need to see the result of the entry to deduct if XSS is possible. If the server is parsing your input, maybe you can find
by MajorSauce 7y ago
I completed the challenge. You don't need to see the result of the entry to deduct if XSS is possible.
If the server is parsing your input, maybe you can find a way for the server to leak more than it wants.
If you want more information, or simply the answer, PM me.
- m4cie 7y agoHi, could you provide some more information regarding how one can force the server to leak more information than it should? I have been stuck with this exercise for quite some time and am honestly out of ideas.