PortSwigger LabsBy Wali Khan Kakar / 10/09/2025 Table of ContentsPortSwigger Labs1: Stored XSS into HTML context with nothing encoded2: Lab Exploiting LLM APIs with excessive agencyBurp SuitePortSwigger Labs1: Stored XSS into HTML context with nothing encodedStored XSS into HTML context with nothing encoded2: Lab Exploiting LLM APIs with excessive agencyLab Exploiting LLM APIs with excessive agencyBurp Suite