Cross Site Scripting (XSS) | Task 4

Problem Statement

Prerequisites

• XSS (I can’t say the level, you need to learn different types of it. you can follow this tutorial series for an initial understanding)

Solution

By the description, we can understand the query field which is taking input is vulnerable to XXS. And it’s about getting cookie. So a simple payload like alert(document.domain), we can easily get the flag.

Well for me, I know about the payload but I didn’t solve it like that. CTF is about getting flags anyhow 😁. Do you remember we actually got a reverse shell to the server? And the server contains the source code?! Hehehe. Yes I read the source code to get the flag. 😁😁😁