Introduction To Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and backticks Unicode-escaped

In XSS into a template literal, Unicode-escaped XSS is a web security vulnerability where untrusted user input is not properly sanitized or encoded when inserted into a template literal. The attacker uses Unicode escaping techniques to bypass security measures and inject malicious scripts into the vulnerable webpage. This can lead to unauthorized actions, data theft, or compromised user accounts. To mitigate this vulnerability, web developers should implement input validation and output encoding practices. Prioritizing web security, following secure coding practices, and conducting regular security assessments can minimize the risk of reflected XSS vulnerabilities in template literals, protecting web application integrity, user data confidentiality, and ensuring a safe browsing experience for users.

Lab Solutions | Practical Work Time XSS into a template literal

This lab contains a reflected cross-site scripting vulnerability in the search blog functionality. The reflection occurs inside a template string with angle brackets, single, and double quotes HTML encoded, and backticks escaped. To solve this lab, perform a cross-site scripting attack that calls the alert function inside the template string.

Stepwise Solution of the lab:-

After accessing this lab, we first noticed it has “Search” functionality.

Now we will check the functionality via any random word. Move on Burp Suite and turn on Intercept. [And as you know if you’re using Firefox then use FoxyProxy]

Click on Search.

After clicking on Search just got a prompt to forward the request. So, we simply Send to Repeater.

Here we clicked on Send. And searched xyz or the random word you can say. In this scenario, we can inject a payload for Reflected XSS (Cross-site scripting) such as the below one.

${alert(1)}

Now click on Search and let’s see what will happen.

BOOM! We got Reflected XSS (Cross-site Scripting). And the lab is solved successfully.

I hope you had loved reading this article after you had completed this article we highly recommend you to study the next article: Reflected XSS with event handlers and href attributes blocked, please don’t forget to leave a comment over here and share it with your friends as well, Good Luck!

Thank you for reading, if this article really helps you then do share it with your mates.
And follow @masaudsec on Twitter.

FAQS