Hello Friends,

I’m Rem01x And I’m Currently Preparing For The eWPTX Exam So I Will Be Walking Through All PortSwigger Labs And Make Sure To Make Writeups For All Of Them.

Let’s Start Now.

Assume that we have this website.

Untitled

Now, let’s navigate to the source code and see what can we find.

Untitled

Notice the script in this place.

Now, let’s understand what does this script actually does.

Untitled

Now, focus

  1. the script is searching for the # sign in the website link.

  2. trying to match it’s values with the value in the web source.

but how !?

Untitled

Look, there is a post in the bottom of our page called The Cool Parent.

let’s try to call the function using the # sign