Screenshots

Home > Xss-Injection > Haxxor injects HTML into the search input > Screenshots

Report generated 04-07-2025 13:41

Juice Shop Is Susceptible To XSS Attacks Feature

1 To 10 Seconds (Duration)

Haxxor injects HTML into the search input

Given Haxxor goes to the Juice Shop

Haxxor opens the shop

Haxxor opens the Home page

Haxxor opens the shop (completed)

Given Haxxor goes to the Juice Shop (completed)

$When she searches for "<iframe src=\"javascript:alert(`xss`)\">"$

she searches for <iframe src="javascript:alert(`xss`)">

she clicks on Search button

she enters '<iframe src="javascript:alert(`xss`)">' into Search input

she enters ENTER into Search input

she searches for <iframe src="javascript:alert(`xss`)"> (completed)

$When she searches for "<iframe src=\"javascript:alert(`xss`)\">" (completed)$

Then she sees an alert message containing "xss"

she should see Alert message is xss that is equal to: <"xss">

she dismisses the alert dialog

she should see Alert message is xss that is equal to: <"xss"> (completed)

Then she sees an alert message containing "xss" (completed)

And she sees she has solved the "DOM XSS" challenge

she should see a value that is true

And she sees she has solved the

SUCCESS" width="0" />

Serenity BDD version 4.2.33