Screenshots

Home > Xss-Injection > Haxxor can inject a payload into the page > Screenshots

Report generated 04-07-2025 13:41

Juice Shop Is Susceptible To XSS Attacks Feature

1 To 10 Seconds (Duration)

Haxxor can inject a payload into the page

Given Haxxor goes to the Juice Shop (completed)

$When she searches for "<iframe width=\"100%\" height=\"166\" scrolling=\"no\" frameborder=\"no\" allow=\"autoplay\" src=\"https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true\"></iframe>"$

she searches for <iframe width="100%" height="166" scrolling="no" frameborder="no" allow="autoplay" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true"></iframe>

she enters '<iframe width="100%" height="166" scrolling="no" frameborder="no" allow="autoplay" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true"></iframe>' into Search input

Then she sees she has solved the "Bonus Payload" challenge

SUCCESS" width="0" />

Serenity BDD version 4.2.33