Postboard Write-up

In this short write-up I will tell you how to solve one of the challenges on MobileHacking Lab website. Specifically Postboard lab for Android. Application We run the application and see that there is “Write your Markdown message here” field. We’ve tried a couple different messages just to see what is going on. Exactly, <script> and <script>alert(1)</script>, which were not successful and the output was just a blank line. However, payload <img src=x onerror=alert(1)> showed a message displaying 1 . ...

April 15, 2024 · 3 min · 465 words · K