Web - Client

Hi,
I’m stucking at get admin cookie via XSS. My payload can bypass filter and also redirect me to my proxy with my cookie included. But after waiting for bot read message, nothing return.
Have anyone hint me a bit about this challenge?
Tks.

Some XSS which works on your browser will not be execute by the bot. There is only one XSS available. The bot is CasperJS. You can install it to test your payload if you want.

Hi,

Is the casperjs running on phantomjs or slimjs? Does it make a difference?

thank you so much

I sent a payload which redirects instantly to my proxy, without the admin having to use his mouse or anything and it still won’t work, so I’m guessing this challenge doesn’t simulate well a human being who actually enters the page. I ran out of ideas anyway.