I'm new to penetration testing and I found a Reflected XSS vulnerability on the website I'm working on.

But the thing is when I submit the form the website automatically redirect me to www.website.com/sendform.php without showing the parameters in the URL.

My question is basically if there is a way to exploit the XSS vulnerability in a way that I can send it through links.


It sounds like you are asking how to tamper with form submissions that are sent in the body via POST, not as part of the URL as with GET.

The way to do this is with a man-in-the-middle proxy such as Burp or ZAP. They will allow you to intercept, read, and modify requests being sent from the browser to the server. As an example, if there are client-side content checks, this allows you to bypass them.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.