XSS Reflected Referer

XSS - Reflected (Referer) - Low Security Level

Solution:

Please refer to the earlier lesson - XSS - Reflected (PHP_SELF). Link mentioned in description.

https://www.youtube.com/watch?v=_N3IwxytkWw&list=PLmC06jCwVwlo-RdL444niMc5-oQyA4dkG&index=57

Step 1. After you complete the XSS - Reflected (PHP_SELF) lesson as I have shown in the video and select the lesson XSS - Reflected (Referer) you will find The referer link as shown in the video:

Select the link and paste it in the new tab and check the results.

Note: The referer link is the result of the traces left from the earlier lesson.

Step 2. We can also test this lesson with BurpSuite.

*Note: I am using BurpSuite pre configured browser, in case if you are not using the pre configured browser then please configure the browser with proxy and then follow the below steps.

a. Select the lesson and click on hack
b. Go to BurpSuite
Forward request if required, till you find

GET /bWAPP/xss_referer.php HTTP/1.1
* Note : As Angled brackets aren't allowed in YouTube Description, replacing them with ( ), kindly make the necessary change.
 Replace Referer contents with (script)alert("PseudoTime")(/script)
As shown in the video.
c. Forward the request
d. Visit the bWAPP lesson page for the output

PseudoTime