Solving postMessage() III

This exercise covers how insecure calls to the JavaScript function postMessage() can be used to trigger a Cross-Site Scripting

PTLAB

PRO

Tier

PTLAB

Medium

PTLAB

1-2 Hrs.

PTLAB

850

PTLAB

Orange Badge

Network requirements:

Public IP address recommended

Common Mistakes:

The URL visited by the victim changes every few hours, make sure the URL in your payload targets the website the victim is currently visiting

Online access to this exercise is only available with PentesterLab PRO