Fictional Application
NextGen Enterprise Staging
Continuous Integration & Staging Gateway
NextGen Enterprise has deployed an internal staging environment. The public landing page is a standard placeholder. As an authorized penetration tester, you must follow a methodical reconnaissance workflow: discover hidden directories, enumerate active files, identify unlinked parameters, and test for reflection.
🎯 Assessment Objective
Follow the discovery chain: /dev → /active → review.html → discover parameter id → execute XSS.
Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.