Loading page
Review the challenge brief, files, and requirements.
Search Portal reflects user input inside the search results page and loads an administrator session in the same origin during review.
Trigger XSS in the live app, steal the admin session token, and submit it as proof.
Target: Search Portal - A search application under security review
Sign in to attempt this challenge.
This challenge is played in the labs environment.
Open Labs