Stored XSS into Anchor Tag Href Attribute
Here we run a stored XSS attack by manipulating user input when submitting comments to a blog. We inject into to the Href Attribute on an anchor tag, meaning that a XSS attack is launched any time a user clicks on the generated link.
This is one of the Burp suite labs. Full title of the lab - Stored XSS into anchor href attribute with doubled quotes HTML-encoded.
Support This Channel
======================
Please like and subscribe, it means a lot!
Please buy me a coffee so I can continue to make content.
https://buymeacoffee.com/zenshell
Join our Discord
/ discord
00:00 Introduction
00:25 Exploring the lab
02:04 Intended functionality
03:11 Injecting into the href attribute
04:47 Post analysis