← Back to list

Lab: Reflected XSS into a JavaScript string with angle brackets HTML encoded

Hello Friends,

Uzumaki Rem01x · 2024-01-25 07:51 · 0 claps · 1.4 min read
#ewptx #osee #osce3
Open on Medium ↗
Wiki topics: 🌐 · Web Development

Lab: Reflected XSS into a JavaScript string with angle brackets HTML encoded

Hello Friends,

I’m Rem01x And I’m Currently Preparing For The eWPTX Exam So I Will Be Walking Through All PortSwigger Labs And Make Sure To Make Writeups For All Of Them.

Let’s Start Now.

Assume that we have this website.

Please notice the search functionality.

let’s search for anything.

Notice that our search reflected to the page.

Now, let’s inspect the source code.

My name is reflected to a JavaScript code.

let’s try to breakout the code.

'-alert(1)-'

Now, press search.

As observed we got an alert.

Alright Let’s Go We Did It And Solve The Lab.

Uchiha_Rem01x #Uchiha-Rem01x #1337


메타데이터
post_id
83e8f90e2f6a
slug
lab-reflected-xss-into-a-javascript-string-with-angle-brackets-html-encoded-83e8f90e2f6a
url
https://medium.com/@uchiha-rem01x/lab-reflected-xss-into-a-javascript-string-with-angle-brackets-html-encoded-83e8f90e2f6a
canonical_url
https://medium.com/@uchiha-rem01x/lab-reflected-xss-into-a-javascript-string-with-angle-brackets-html-encoded-83e8f90e2f6a
author_url
https://medium.com/@uchiha-rem01x
status
ok
fetched_at
2026-06-28 10:39:35