attribute XSS

[Nirav2086]

in attribute XSS lab i have triggered 2 to 3 time and copied the url and submitted but it says wrong why did anyone else also faced this

[paj28]

Ok, you are close, but you need to make your payload trigger without user interaction. One approach is described in the solution video.

[paj28]

If you go on the lab page there is a link to a solution video. It does not use onmouseover.

[Nirav2086]

look, in this exploit no user interaction required and still it failed when i submitted the URL

[paj28]

That does require user interaction - a mouse move. Anyway, watch the solution video, it has the technique that works.

[Nirav2086]

okay get it sorry my bad i was trying on my own

[Nirav2086]

thanks