Master the HTML injection technique

1. Put random text ‘Injection’ in my case.

2. Intercept the request.

3. Carefully watch your text, how it is passing.

4. See, our input text is going automatically within <p></p> tags.

5. Change the tags with any working HTML tags, in my case I replace <p></p> tags with <a></a> tags.

6. Forward the request.

Now you can chain ⛓️ HTML injection with XSS 😌