Search the Knowledge Base

Pentesting Practice Note: This search field reflects the ?q= URL parameter directly into the page using innerHTML — a classic Reflected XSS vulnerability. Try: ?q=<img src=x onerror=alert(1)>