Web - Client

Hi

I found a way to communicate with the administrator and designed some payload using an event but I seem not to be able to make him interact with it. Are the events also supposed to be triggered when loaded ?

I been trying to complete this challenge too, Im pretty much in the same situation u are in. Ive asked for help multiple times, but ppl rarely reply. Its frustrating. Im able to bypass filters on this one and "XSS - Stored - filter bypass " but I cant get the bot to interact with my payloads. I read somewhere that on the reflected xss the bot is casperjs. Ive looked into it but its confusing.

Send me your work by private message I will check it.

i sent u mine, u never replied

Indeed haha ! I missed your message sorry  😊

I cant get the administrator to interact on both the reflected xss and filtered xss  😕  🙁  😡

Hi,

Does the casperjs bot use phantomjs or slimjs?