Cooking an XSS attack with gadgets (Intigriti August XSS challenge)

Today we will be solving Intigriti’s August XSS challenge, which is based on an XSS cookbook. This cookbook has multiple XSS payloads listed together with the steps which needed to be performed. Somewhere in this application, there should be an XSS vulnerability. If we take a look at the source code we can see that 3 scripts are being included, the main script with all the functionality and a jquery-deparam library together with google analytics....

22 August 2021 · 4 min · CyberSpark