The lab Metadata XSS is not the same as the one shown in the video

[echoesofwhoami]

https://www.youtube.com/watch?v=4vEpEfSG4EE

https://xssy.uk/lab/57

the lab doesnt even tell where the image goes and the url param shown in the video doesnt work

[paj28]

Oh yeah, the video does need updating. I'll get on to that at some point. In the meantime, you can use a similar technique with the Exif editor, but you upload the image to the lab, rather than putting it on your payload hosting lab.

[echoesofwhoami]

I tried that but I didn't figured out the followup, it doesn't tell me where the image is I tried fetching from the usual upload path but is not there, and I tried submitting the bot the same url where I land after uploading the image but same, no results.

[paj28]

The image isn't actually saved. The only thing that's saved is the camera model from the EXIF data. That is reflected on the lab's home page, and that's the URL you need to submit.

[echoesofwhoami]

oh ok that worked, thanks

[echoesofwhoami]

since we are here can I have a hint or nudge for the unlinked challenge? I looked for hours tried everything I could but I can't see what's the goal

[paj28]

You've been getting busy! Yeah, no worries, you need to use a tool like dirbuster or content discovery within Burp, which brute force common file names to find one that isn't linked.