Loading page
Review the challenge brief, files, and requirements.
The profile viewer reads both query-string and fragment data in client-side JavaScript before writing it into the page. Trace the browser-side sinks, trigger DOM XSS, and recover the auth token from the current session.
Sign in to attempt this challenge.
This challenge is played in the labs environment.
Open Labs