PortSwigger Labs - Reflected XSS into HTML context with all tags blocked except custom ones

[@ImPerhapsLater]

Great explanation of why this attack works... so many others just post the script as their "solution" without explaining how to get there. Thank you!!

[@التدريسالالكتروني]

man you are amazing in explaining !! please continue solving labs

[@东倪]

Your explanation is very insightful, thank you

[@krishgohel9403]

what an explaination bro 😇 so underrated channel

[@OhmKumar-j5f]

awesome explanation dude cleared all doubts please cover all labs of xss

[@ggm3743]

what a wonderful explanation! How did you become this good in html, js...? I am trying to break into bug hunting but I dont know how much js should i actually learn? I know (university-level) C, Java and Python so its easier to understand Js for me now. Should i learn js and train on Portwigger labs at the same time or what would you recommend? Thank you :)

[@nimaasadi730]

Great explanation with great teaching

[@solvedandlearned3878]

Is it necessary to have the tabindex even if we include our id value in the url hash.?

[@anamariedevera8635]

I love your channel

[@amol24by7]

Awesome explanation

[@pinkypink2410]

very useful,thank you!

[@yuraekim9389]

You are really good! Thank you

[@nayar_km]

awesome explanation

[@التدريسالالكتروني]

please make a video about this lab Reflected XSS in a JavaScript URL with some characters blocked

[@imgyanesh_0]

I am also doing same as you but after open xss.html page it write refused to connect What can I do sir

[@mukoshmanob9240]

sir, how will you know that 'onload' event not work? how i understand

[@lIlIllll1]

YOU ARE GREAT

[@youssefblt9839]

thank s for the explaination too

[@sscoconut1265]

what does the # mean bro? does it mean calling a specific id?

[@Shaik_Afrid]

bro how ur doing this i mean in order to understand all these stuff how much js should i learn

[@knowledgeboxbd9625]

How you know that this search box is vulnerable to tabintex?

[@CodeVerd]

When u use custom payload ,and if you know it's vulnerable, mostly u must use "tabindex" .In real world we need to check if tabindex is allowed or not

[@knowledgeboxbd9625]

@@CodeVerd Thanks bro now i understand .🥰

[@CodeVerd]

@@knowledgeboxbd9625 ♥️

[@abhishekbiswakarma1541]

brother i am using the same payload but the lab is not solving

[@warwolf5154]

yes form also its not working

[@ginsteward9673]

thanks my bro. it's usefull

[@CodeVerd]

Thanks mate

[@محمّد.09]

nice

[@cyber_torhat]

I feel like you say "Let's get started" intentionally in a slightly different way. Lol

[@hillclise1034]

Amazing clips . Want more views? -> Promo SM!!