Fictional Application
GlobalFx Currency Calc
Real-Time Foreign Exchange Rates
GlobalFx provides real-time foreign exchange conversions. The site supports custom promotional widgets configured via a URL parameter `config`. The client-side script parses this configuration object and injects promotional notices. Analyze the data transformation.
🎯 Assessment Objective
Craft a configuration object in the URL that unpacks into a malicious payload and reaches the DOM sink.
Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.