Challenge 18: Javascript for Pentesters

Welcome John!

Ram Shankar, Walter Drive, CA, USA


  1. Find John's Postal Address using an XSS vulnerability on this page
  2. Display the Postal address in the div with id "result"
  3. No Hardcoded values can be used - everything has to be figured out dynamically


  1. Remember what you have learn at Pentester Academy