Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Web-12. Reflected XSS in BlogSearch
Mission
BlogSearch is a simple search engine for blog articles. The search query is reflected back on the results page — check whether user input is properly sanitized before being inserted.
Hints
Hint 1 Show
Try entering HTML tags in the search box, e.g. <h1>Hello</h1>
Hint 2 Show
HTML <script> tags can execute JavaScript
Hint 3 Show
Start with a simple payload like <script>alert(1)</script> to confirm execution