Soapbx Oswe -
You aren't looking for XSS in the search bar. You are looking for that don't check the actual MIME type, or SQL queries built via string concatenation inside a try/catch block.
: Success depends on writing a single script that automates the entire exploit chain. It’s common for candidates to have the "exploit" working manually but struggle for 5+ hours to get the final python script to execute perfectly. Preparation Resources soapbx oswe