Reflected XSS into HTML context with most tags and attributes blocked (Video solution, Audio)

[@jasonyeung2498]

without explanation, why doing exactly the same from the answers? I did not get it.

[@777pios]

I don't understand why we have to use a if this tag is not allowed and the exploit server also the onload attribute isn't allowed. I did not understand how to arrive at that solution?

[@ucminhnguyen5610]

mee too.Thanks Michael, can you explain it to us?

[@JohnSmith-he5xg]

Agreed, this needs explanation...

[@ahmedabdellaoui796]

exactly we need more explanation

[@ahmedabdellaoui796]

hello 777pios below i found a video that explain the lab, enjoy : kzbin.info/www/bejne/j3-UhHaga8SWi5I

[@ahmedabdellaoui796]

finally one of my colleagues explained it to me : there are 3 three parts in the lab : 1 : detecting wich tag and attributes are allowed ( body and on Resize ) 2 : inserting java script using the allowed tag and attribute to automatically resize the page we used the event onload ... The above is enogh to pop up the alert but on this lab it is needed to prepare also an exploitation : 3 exploitation menas we have to send a malicious url ( that is vulnerable ) to a victim, and to be able to send email, we have to use tag ( this tag will not be injected into our lab, no it's only needed to prepare the URL i.e we our victim will receive our link it starts only after https//... wich includes our allowed tag and attribute i hope my explaination help to understand it

[@rev7841]

how did you get %20=1 after body? and %22%3E%3C after ?search? this is not explained at all

[@vasumudiraj8327]

encoded form

[@ahmedabdellaoui796]

Hello III below i found a video that explain the lab, enjoy : kzbin.info/www/bejne/j3-UhHaga8SWi5I

[@bugfinder9853]

may i know what is logic %20=1 ???

[@paulojr1384]

i think is couse you are saing to burp to complete the payload (%20 is backspace url encoded) so you are saing: fuzz for some workable event here

[@dragoschiperi8090]

Hi! What is Portswigger's exploit server equivalent into Burp? How can this lab be resolved using only Burp? Thanks Michael!

[@deepeddyrecords5933]

Excellent work! Thank you again. I like your quick and to-the-point demonstrations. I don't know why people complain. I like to see the solutions so I can go back and research what you did on my own. I learn more that way.

[@duylt5_letrongduy743]

why do you need to add $$ twice? because I see only Brute force has 1 variable -> add 1 $ right? Please can anyone help me understand this problem?

[@Ritikamaurya112]

in my burp it's showing payload count 152 & request count 0 I did the same you mentioned

[@jorgsnjoroge4869]

It's all a mess, you aren't explaning what is what😢 what is even going on???

[@securityintech]

There is no need to add "> infront of body payload, without that as well it will work.

[@LivingmotivatedLifewithpurpose]

Thanks Michael, core tech stuff liked it. But it would be helpful for newbie like us if you add some explanations

[@Michael10Sommer]

Thank you very much. If something is unclear, I will explain it. But I always recommend, work through the topic and come back to the labs. My goal is to solve the labs as fast as possible, so you don't need a lot of time to watch the videos.

[@ahmedabdellaoui796]

finally one of my colleagues explained it to me : there are 3 three parts in the lab : 1= detecting wich tag and attributes are allowed ( body and on Resize ) 2= inserting java script using the allowed tag and attribute to automatically resize the page we used the event onload ... The above is enogh to pop up the alert but on this lab it is needed to prepare also an exploitation : 3= exploitation means we have to send a malicious url ( that is vulnerable ) to a victim, and to be able to send URL, we have to use tag ( this tag will not be injected into our lab, no it's only needed to prepare the URL i.e our victim will receive the link and it will starts only after https//... wich includes our allowed tag and attribute and js i hope my explaination help you to understand the lab for newbies like me Below a video that explaine much about this lab, @

[@ahmedabdellaoui796]

kzbin.info/www/bejne/j3-UhHaga8SWi5I

[@huyha3684]

very helpful, tks bro

[@acronproject]

very good

[@mahmoudchiboub8213]

rana is way better

[@Lunamona-qp8cg]

yes :(