Cache Poisoning? - Solution to November '22 XSS Challenge

[@shubham_srt]

So FUN! ThankYou!!

[@intigriti]

Glad you enjoyed it! 💜

[@DMINATOR]

That's quite a challenge, and i wasn't able to figure out myself so good job to those that did it !

[@intigriti]

It was a really hard one indeed! But that's how we like them! 🔥

[@_CryptoCat]

Such a cool challenge! Very well explained 😉

[@intigriti]

Thank you! Cheers!

[@camelotenglishtuition6394]

Great video as always!

[@PinkDraconian]

Thank you! 🔥

[@camelotenglishtuition6394]

@@PinkDraconian No worries dude..have a wonderful week

[@intigriti]

Cheers! 🍾

[@AyushKumar-hv2ww]

Nice video 🙏🙏

[@intigriti]

Thank you!

[@mathsher2880]

amazing solution，lol！thanks

[@intigriti]

You're welcome!

[@UglyMoo4510]

I can login as undefined user in that website without username and password

[@intigriti]

That's cool!

[@0xbartita]

I didn't understand why cache helped us in this challenge xss worked without it .

[@intigriti]

Did you manage to get the XSS working without poisoning the cache?

[@0xbartita]

@@intigriti yes why not? we put the url containing the payload we supposed not to put the payload in url if cache exist ?