Serenity BDD Report
Home > Juice Shop is susceptible to XSS attacks > Haxxor can inject a payload into the page
Report generated 04-07-2025 13:41

Juice Shop Is Susceptible To XSS Attacks

  1 To 10 Seconds (Duration)

Haxxor can inject a payload into the page
 

Cast

 

Steps Screenshots Outcome
Given Haxxor goes to the Juice Shop
SUCCESS 3s 369ms
When she searches for "<iframe width=\"100%\" height=\"166\" scrolling=\"no\" frameborder=\"no\" allow=\"autoplay\" src=\"https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true\"></iframe>"
SUCCESS 1s 313ms
Then she sees she has solved the "Bonus Payload" challenge
SUCCESS 503ms
SUCCESS 5.2s
Serenity BDD version 4.2.33