I found my first bug bounty...what can I do with it?
Its an XSS exploit. I sandwiched it in between a Login Id in burp and ran it in intruder. I got the code to run in the browser "<script>", but I need to get rid of these extra characters to run the alert. What do?
Heres the result:
<script>D2889FBA732284509F47C7D1D54FE5B87DBA7CD860B8565AD1C8AFF8A4666636E98D64BDE7AAEA6B910072A735CB16F5B03C8"},"env":{"RC_LOCATION_SEARCH_NEW_RC_SOLR_ENDPOINT":"/pws/v0/index/drive/search/"},"canEDModalBeDisplayed":false};
var pclnData = PCLN_BOOTSTRAP_DATA.pclnData || {};
</script>
The first string is the second half of the LogIn id, the rest is the code that got spit back onto the screen. I need to get rid of that text to run the exploit.