mission · xss-stored-guestbook
The Guestbook That Never Forgets
HackerMart runs a public guestbook. Whatever you post is saved on the server and shown to every visitor — including the site admin, who checks in periodically. Post something that only misbehaves when the admin is looking.
objective
Plant a payload in the guestbook that fires when the admin visits.
Guestbook
Leave a comment about your shopping experience.
Simulated target for training. This page is the vulnerable website — payloads you craft execute here in your browser. Practice only on systems you own or are authorized to test.
No comments yet. Be the first!