Screenshots

Home > Xss-Dom > Haxxor can inject a payload into the page > Screenshots

Report generated 04-07-2025 12:58

Juice Shop Is Susceptible To XSS Attacks Feature

1 To 10 Seconds (Duration)

Juice Shop Is Susceptible To XSS Attacks (feature)

Haxxor can inject a payload into the page

When she searches for '<iframe width="100%" height="166" scrolling="no" frameborder="no" allow="autoplay" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true"></iframe>'

Haxxor searches for '<iframe width="100%" height="166" scrolling="no" frameborder="no" allow="autoplay" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true"></iframe>'

Haxxor navigates to "/"

Haxxor ensures that true does equal true

Haxxor navigates to "/" (completed)

Haxxor ensures that true does equal true

Haxxor waits until Search button does become visible

Haxxor clicks on Search button

Haxxor waits until Search input does become visible

Haxxor enters "'<iframe width="100%" height="166" scrolling="no" frameborder="no" allow="autoplay" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true"></iframe>'" into Search input

Haxxor dismisses next modal dialog window

Haxxor presses key Enter in Search input

Haxxor waits until 'Search results does become visible

Then she sees she has solved the "Bonus Payload" challenge

Haxxor confirms that Bonus Payload has been solved

Haxxor sends a GET request to '/api/Challenges/?name=Bonus Payload': <span class='success-color'>SUCCESS</span>

Serenity BDD version 4.2.34