mm0@home:~$

[xss] lab reflected xss with event handlers and hr 30c175830d9c4726b6106abb9d3a3dc1

[XSS] Lab: Reflected XSS with event handlers and href attributes blocked


Untitled

so injecting a vector means using tags like but I'm still going to use intruder to get a full list of the supported tags.

so we can see we already have two tags with a 200:

Untitled