Empresas
Empregos
  • Sobre nós
  • Soluções
    • Publicação de vagas
      Publique sua vaga e receba candidatos qualificados em 48h.
    • Avaliações de candidatos
      Mais de 500 testes técnicos e psicológicos, mais anti-fraude.
    • Headhunting
      Busca executiva personalizada do início ao fim.
    • Folha de Pagamento + EOR
      Dispersão de folha e EOR em mais de 15 países da LATAM.
  • Preços
  • Empregos

0

280
Visualizações
Execution of XSS inside of <p></p> when >< are filtered and cannot escape using ' "

I am learning XSS for ethical purposes and I cannot seem to figure this one out on my own. I am trying to use XSS (legally) on a site by appending a <script> at the end of the URL. This results in a message saying Error 404: The page //www.###.com/###/\<script>alert('XSS')\</script> was not found.. The code in chrome dev tools looks like

<div class="text">
    <p>
        "Error 404: The page https://www.###.com/###/<script>alert('XSS')</script> was not found."
    </p>

When editing as HTML:

Error 404: The page https://www.redditinc.com/press/&lt;script&gt;alert('XSS')&lt;/script&gt; was not found.

When I try to break out using ", I get the following:

dev tools:

<div class="text">
    <p>
        "Error 404: The page https://www.###.com/###/"<script>alert('XSS')</script> was not found."
    </p>

HTML:

Error 404: The page https://www.redditinc.com/press/"&lt;script&gt;alert('XSS')&lt;/script&gt; was not found.

Same thing goes for '. I'm new to penetration testing, and XSS. Is there anything I can do?

about 4 years ago · Juan Pablo Isaza
Responde à pergunta
Encontrar trabalhos remotos

Descubra a nova forma de encontrar um emprego!

melhores empregos
Principais categorias de trabalho
Empresas
Postar vaga Preços Comercial
Jurídico
Termos e Condições Política de privacidade
© 2026 PeakU Inc. All Rights Reserved.
Andres GPT
Recomende algumas ofertas para mim
Preciso de ajuda