Cross-site Scripting-1

Prompts and answers

• Doing so will reveal the answer to this question.
  HTML_T4gs
• Create an alert popup box appear on the page with your document cookies.
  W3LL_D0N3_LVL2
• Change "XSS Playground" to "I am a hacker" by adding comments and using Javascript.
  websites_can_be_easily_defaced_with_xss
• Take over Jack's account by stealing his cookie, what was his cookie value?
  s%3Aat0YYHmITnfNSF0kM5Ne-ir1skTX3aEU.yj1%2FXoaxe7cCjUYmfgQpW3o5wP3O8Ae7YNHnHPJIasE
• Post a comment as Jack.
  c00ki3_stealing_
• Craft a reflected XSS payload that will cause a popup saying "Hello"
  ThereIsMoreToXSSThanYouThink
• In Javascript window.location.hostname will show your hostname, in this case your deployed machine's hostname will be its up.
  ReflectiveXss4TheWin
• Try entering: test" onmouseover="alert('Hover over the image and inspect the image element')"
  BreakingAnElementsTag
• ![[Pasted image 20221002212936.png]]
  JavascriptIsAwesome
• Bypass the filter that removes any script tags.
  3c3cf8d90aaece81710ab9db759352c0
• The word alert is filtered, bypass it.
  a2e5ef66f5ff584a01d734ef5edaae91
• The word hello is filtered, bypass it.
  decba45d0eff17c6eedf1629393bee1d
• onchange
  2482d2e8939fc85a9363617782270555