Oswe Exam Report Work 2021 Official

Introduction

Reflected Cross-Site Scripting (XSS) — Medium

• [ ] OSID is on the title page.
• [ ] Target IP is correct (not a practice VM).
• [ ] Every vulnerability has a source code snippet.
• [ ] Every vulnerability has a Python PoC.
• [ ] Every Python PoC includes requests, sys, and argparse (professional).
• [ ] Screenshots are clear, high-resolution, and show the terminal timestamp.
• [ ] The final flag is readable in a screenshot.
• [ ] The report is a single PDF (use Pandoc or MS Word "Save as PDF").
• [ ] The PDF file name is OSWE-OSID-Exam-Report.pdf (check OffSec naming convention).
• [ ] You have re-run your exploits after a full VM restart (simulating the examiner's environment).

• Provide a Python script or cURL command.
• The PoC must be reproducible by the grader in one step.