We covered practical HTML Forms Injection using Burp Suite to solve Challenge 10 in OWASP Hackademic free lab.

We can test for HTML Injection by changing the value of the query parameter with html code Or this can be done via a proxy interceptor when the HTTP request is POST.

In the stored version of HTML Injection, we can use the same malicious login code used in the case of reflect HTML injection but the place of injection would be any input box in the website such as comment areas, search forms and other places that take user input.

Get OSCP Certificate Notes

The Complete Practical Web Application Penetration Testing Course

Video Walkthrough

, , , , ,
Show Comments

MasterMind Study Notes

About the Author

Mastermind Study Notes is a group of talented authors and writers who are experienced and well-versed across different fields. The group is led by, Motasem Hamdan, who is a Cybersecurity content creator and YouTuber.

View Articles