mission · xss-reflected-search
Reflected in the Search Box
HackerMart's product search echoes whatever you search for straight back onto the page. That's normal — the question is whether it comes back as text or as live code. Use the search box (watch the address bar update), and then try navigating to a crafted URL yourself.
objective
Fire an alert box by injecting a script into the search box.
Simulated target for training. This page is the vulnerable website — payloads you craft execute here in your browser. Practice only on systems you own or are authorized to test.