C1 JS string context

Open the console - your value is used in script below.

You are inside var q='...'. Break the string and run code: ';alert(document.domain);//

RatXSS Dojo · HackXpert Coaching · The XSS Rat · authorized lab use only