Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
This web application has a basic XSS vulnerability. Find where input is reflected in the guestbook and retrieve the flag.
Focus on the message parameter
Test if HTML tags or event handlers execute
Start with <script>alert(1)</script>
After confirmation, retrieve the flag