Collaborate Disseminate
While testing a website i noticed that the value of parameter username is reflected inside the javascript code of the response. It’s insert into a variable like this one:
var valueUser = “my-controlled-value”;
How can i tri… Continue reading How can i get an alert box from this?
I have been doing this challenge and I came across a super hard level that I think its all about DOM XSS.
I know it because I don’t get any response from the server side and everything I insert won’t reflect back because of … Continue reading Cross-site scripting (DOM-based)? [on hold]
I am testing a bug bounty website and i reached a support ticket creation functionality. I registered with email address {{15*15}}@testemail.com.
I created a ticket but when i try to open the ticket i noticed a call to https:… Continue reading Can this be turned into dom xss?
Data is read from window.location and passed to the wrap() function of function of jQuery via the following statement:
t.Location.wrap(window.location)
The version of jQuery in use is the 1.12.1 – Is this code vulnerable t… Continue reading Is this code vulnerable to DOM based XSS? jquery wrap()
Thats the code :
var playURL = window.location.href;
var queryString = playURL.split(“?”)[1];
if (queryString){
params = queryString.split(“image=”)[1]
} else{
params = “none”;
}
if (!params){
params = “none”;
}… Continue reading Is this JavaScript code vulnerable to DOM based XSS?
Web-site uses jQuery 1.8.3 which has known XSS vulnerability in selector. (https://snyk.io/vuln/npm:jquery:20120206).
It passes filtered and urldecoded document.location.hash (val2 below) value inside selector.
$(‘div[data-foo=\”+filter… Continue reading XSS with escaped equal sign inside jQuery selector
Is this code vulnerable to DOM based XSS?
The application is using jQuery 1.12.4 and i noticed that Data is read from window.location.hash and passed to $() via the following statements:
var target_ = window.location.hash.s… Continue reading Is this code vulnerable to DOM based XSS jquery animate?
Is this code vulnerable to DOM based XSS?
The application is using jQuery 3.3.1 and i noticed that Data is read from
window.location.hash and passed to $() via the following statements:
var hash = window.location.hash.sub… Continue reading Is this code vulnerable to dom based XSS?
I have the following javaScript code in an application, which BURP flags as being possibly vulnerable. However, i have had no luck trying to get it to execute.
var hash = window.location.hash;
if(hash){
… Continue reading Is the following javascript code vulnerable to DOM XSS?
I am trying to generate a POC for DOM XSS exploit. I could inject a code using the following link:
<a href=”wepage.jsp” target=’"><script> alert(document.cookie)</script></div>’>domxss</a>
The … Continue reading Bypassing double quote in DOM based XSS?