This lab contains a simple reflected XSS vulnerability in a search feature. The search term is echoed into the page without encoding.
Objective: Call the print() function (simulated) by injecting a script payload. The lab flag unlocks when your payload is detected.
How to solve this lab
- Click ACCESS THE LAB to open the vulnerable practice app (stays on Cyberlium).
- Follow the objective. Use the hint if you get stuck; open Solution guide only if needed.
- When you see a flag like CYBERLIUM{…}, copy it into Submit solution.
- Sign in first — correct flags add +75 XP to your account.
Opens an intentional vulnerable app hosted on Cyberlium — you never leave this site.
Sign in first so XP is saved to your account.