RXSS-07: Keyword Sanitization — VulnXSS Training Lab

RXSS-07 Keyword Sanitization Intermediate Unsolved OmniMetrics Analytics

Fictional Application

OmniMetrics Analytics

Real-Time Cloud Performance & Telemetry

OmniMetrics offers a cloud metrics dashboard where engineers can filter live telemetry streams. The security team implemented a filter that searches for and blocks `alert`, `prompt`, and `confirm`. Your mission is to construct a payload that invokes one of these functions dynamically without writing the forbidden keywords directly.

🎯 Assessment Objective

Execute JavaScript by dynamically resolving or constructing the function name at runtime.

Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.

OmniMetrics Cloud Telemetry

Real-Time Query Ingress & Edge Aggregator

Ingress Active

Cluster Latency (p99)

18.4 ms

↓ 2.1% past window

Ingress Throughput

482.6 MB/s

↑ 8.4% capacity

Memory Pool Pressure

32.8%

Optimal range

XSS Successfully Demonstrated!