RXSS-03 JavaScript URL Easy Unsolved Apex Support Portal

Fictional Application

Apex Support Portal

Enterprise Client Helpdesk & Ticketing

You are testing the customer helpdesk portal for Apex Technologies. When customers browse support articles, a dynamic 'Return to Previous Page' link is rendered based on a URL parameter. Your goal is to determine whether this navigation mechanism can be abused to execute client-side code.

🎯 Assessment Objective

Locate the navigation parameter and execute JavaScript when the user interacts with or navigates the link.

Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.

Apex Enterprise Helpdesk

Logged in as admin@company.internal • Department: Infrastructure SRE

← Return to Support Portal

Incident #4920 Incident #5104

INC-4920

Latency Spikes on Primary US-East Edge Gateway

Investigation In Progress

Priority: P1 - Critical

Assigned Engineer: David Miller (SRE)

Department: Infrastructure SRE

View Mode: detailed

Edge router node pool B reports intermittent 504 gateway timeout bursts impacting roughly 8.4% of unauthenticated API telemetry streams.

Upstream traffic has been shifted to standby cluster availability zones while load balancer health checks are re-evaluated.

Latency Spikes on Primary US-East Edge Gateway

XSS Successfully Demonstrated!