Skip to main content

XSS Song

Video Solution:​

You can find a Video Descrition on this following Link:

https://www.loom.com/share/6a78aeb3b1a2442eb0752b79d08bbf71

Goal of this Chalange:​

Goal of this Chalange is to find the Owasp XSS Song.

Type of Cyberattack​

This is a Cross-Side Scripting Security Vulnerability

Consequents of this Vulnerability​

As a result of this XSS vulnerability, arbitrary JavaScript code can be executed through the search bar. This XSS vulnerability allows attackers to inject arbitrary JavaScript code via the search bar.

Disclaimer​

The vulnerabilities and exploits shown in this repository are provided strictly for educational purposes. Do not attempt to use these techniques on systems without clear and explicit authorization.

Descrition of Solution:​

  1. Navigate to Serchnavigation: Example Banner

  2. Put this following Iframe on the Search Field:

<iframe width="100%" height="166" scrolling="no" frameborder="no" allow="autoplay" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true"></iframe>
  1. Now you can see a Box where you can play and stop the loaded Music.