# Introduction
:BWAPP → Low→ HTML Injection - reflected (POST)
# Training
: htmli_post.php uses POST Method to transfer data. So, Variable values sent to the server are not exposed to the URL. You can check the '/var/www/bWAPP/htmli_post.php' for practice, but I used a proxy tool(Burp suite).
First, When I enter a value into a variable, I confirmed that the output is the same as html_get.php.
One difference is that the variable values are not exposed to the URL, as described above.
I set the proxy settings and modified the variable values using the buff suite.
The modified values are the same as the html tags used in html_get.php
No comments:
Post a Comment