RXSS-06: Function Filtering — VulnXSS Training Lab

RXSS-06 Function Filtering Intermediate Unsolved EchoFeedback Portal

Fictional Application

EchoFeedback Portal

Customer Satisfaction & Experience Analytics

You are assessing EchoFeedback, a customer experience survey platform. Users can review their feedback confirmation before submitting. The developer filters out the functions `alert` and `prompt` to block proof-of-concept scripts. Find an alternative execution vector that bypasses this filter.

🎯 Assessment Objective

Identify the filtered function names and trigger JavaScript execution using an unblocked method.

Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.

⭐

EchoFeedback Survey Desk

Customer Delight & Experience Ratings

Customer Satisfaction Survey Verification

Lookup your submitted survey response using your verification code and order metadata.

Customer Satisfaction Survey Verification

XSS Successfully Demonstrated!