Screenshots

Home > Xss-Dom > Haxxor injects HTML into the search input > Screenshots

Report generated 04-07-2025 12:58

Juice Shop Is Susceptible To XSS Attacks Feature

1 To 10 Seconds (Duration)

Juice Shop Is Susceptible To XSS Attacks (feature)

Haxxor injects HTML into the search input

When she searches for '<iframe src="javascript:alert(`xss`)">'

Haxxor searches for '<iframe src="javascript:alert(`xss`)">'

Haxxor navigates to "/"

Haxxor waits until Search button does become visible

Haxxor clicks on Search button

Haxxor waits until Search input does become visible

Haxxor enters "'<iframe src="javascript:alert(`xss`)">'" into Search input

Haxxor dismisses next modal dialog window

Haxxor presses key Enter in Search input

Haxxor waits until 'Search results does become visible

Then she sees she has solved the "DOM XSS" challenge

Haxxor confirms that DOM XSS has been solved

Haxxor sends a GET request to '/api/Challenges/?name=DOM XSS': <span class='success-color'>SUCCESS</span>

Serenity BDD version 4.2.34