Lab: Reflected XSS into attribute with angle brackets HTML-encoded

Hello Friends,

I’m Rem01x And I’m Currently Preparing For The eWPTX Exam So I Will Be Walking Through All PortSwigger Labs And Make Sure To Make Writeups For All Of Them.

Let’s Start Now.

Assume that we have this website.

Notice the search functionality.

Let’s Try to search for anything.

Okay I searched for Uchiha rem01x and it reflected on the page.

Let’s inspect the source code.

notice that my name reflected in the value of the input.

But What will happen if i entered “ before my name !?

now let’s inspect the source code.

Notice that the “ broke the syntax of the HTML tag.

that give us a space to break out the syntax and enter a code to the webpage.

now let’s enter a code.

"onmouseover="alert(1)

Now, search.

Great we got the pop out.

Alright Let’s Go We Did It And Solve The Lab.

Uchiha_Rem01x #Uchiha-Rem01x #1337