This lab contains a simple reflected XSS vulnerability in a search feature. The search term is echoed into the page without encoding.
Objective: Call the print() function (simulated) by injecting a script payload. The lab flag unlocks when your payload is detected.
How to solve this lab
- Click ACCESS THE LAB — the vulnerable app loads from lab.cyberlium.com inside this page (you stay on cyberlium.com).
- Follow the objective. Use the hint if you get stuck; open Solution guide only if needed.
- When you see a flag like CYBERLIUM{…}, copy it into Submit solution.
- Sign in first — correct flags add +75 XP to your account.
Practice app runs on the lab subdomain in the background — you never leave cyberlium.com. XP still goes to the same account.
Sign in first so XP is saved to your account.