Lab 73 — NetShield — Reflected XSS via 404 Page Attribute Injection

hackadvisor

Task: NetShield DNS monitoring dashboard reflects URL path unescaped into body tag class attribute on 404 pages; admin bot visits reported URLs. Solution: HTML attribute injection breaks out of class attribute to inject onload handler that exfiltrates admin cookie via same-origin feedback API.