Easy
Cross-Site Scripting
TrailBlaze conditions reflected XSS
A hiking-trail conditions report. The location query is echoed back unescaped.
PentestingHere Academy
Official Academy lab
- Attempts
- 6
- Solves
- 5
- Published
- 25 Aug 2026
Scenario
TrailBlaze shows current trail conditions. Searching a location (/conditions.php?location=) echoes the search term back on the results page: "Conditions near {location}".
Goal
Get arbitrary JavaScript to execute in the ranger's session. Every search is delivered to a ranger who opens it in their own browser; any alert(), confirm() or prompt() that fires there sends the flag straight to the banner on your page.