Lab 1

Reflected XSS into HTML context with nothing encoded

We are given a normal looking website, but there is a XSS vuln in the search feature. Let's test with a simple alert

<script>alert('pwned')</script>

Noice.