Fictional Application
Skyline Agent Directory
Premier Commercial & Residential Real Estate
Skyline Real Estate provides directory profiles for real estate agents. Agents can update their professional bio and link to their personal agency website. The website URL is rendered as a clickable link and inside an image preview attribute on their public listing.
🎯 Assessment Objective
Inject a payload into the agent's profile website link that triggers JavaScript execution when viewed or clicked.
Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.