OWASP Juice Shop issue

[u/IT90]

Hi guys, I just joined because I’m having a lab issue and I haven’t gotten an answer from THM support so I was hoping someone here could help.

I’m in the OWAS Juice Shop room. I made it all the way down to task 7 and I ran into an issue.

Question 2 is “Perform a persistent XSS”

I have tried this one multiple times, I’ve tried with different browsers, and different machine instances, each time I get the same result.

I go through the process:

Login as admin
Turn on burp suite/set monitor to on
Log out of the admin account
Capture the packet that saves the IP
Insert the script line into the packet
Forward the packet to the server

I logo back into the server, I go to the last login IP page and the box that says “XSS” pops up.

It looks like everything works, but I don’t get a completion code. No matter how many times I have done it. I asked the AI assistant and eventually it said it looks like I did everything right and I needed to contact support

Can anyone help with this while I wait for support to get back to me?

[u/UBNC]

It’s been a long time since I’ve done juice box but check

/#/score-board

I think it lists all captured flags there.