Collaborate Disseminate
I have an image file. I want to create a download link to the file in the html. How can I get the file to be automatically saved in gallery on android phone when I visit the download link? using HTML or using Python.?
How do I create a Direct URL Download link? I have an image file. How can I get the file to be downloaded automatically when I visit the URL for it? Can I use HTML for this and how?
Continue reading How can I create and download a file with a link? [closed]
I found a HTML injection on a markdown although it seems odd as the user already can use html in the box
So I tried to turn it to XSS but after a day with trial and error I concluded that the website has a whitelist that allows only and … Continue reading XSS Bypass Whitelist
I’m looking at a potential phishing site and I see that some of the HTML is obfuscated. It’s not Base64. All the links look like this:
<link
href="6bkaQeQe69e/st-oU9kY4its4s5Zz2ykykffaNIgaVVtdtPSne0d3bxTbrLcyxygfAd0LXBQWdxowKsvc7G… Continue reading Obfuscated HTML [closed]
I am trying to perform XSS but to get out of the context and write the payload I need to use Angle brackets and the angle brackets are html encoded. I tried double encoding technique with url encoding+html encoding, url encoding+url encodi… Continue reading How to use html encoded characters to perform XSS?
Does anybody have an idea how to reveal hidden content which looks like a link? I looked through the source code and it’s just a link to nowhere: href="#"+798357…
Clicking on this link I’ll receive a whole phone number
I need to run the following inline script to inject some Thymeleaf model variables into a javascript file of mine.
<script th:inline="javascript">
/*<![CDATA[*/
var stripePublicKey = /*[[${stripePublicKey}]]*/ … Continue reading unsafe-hashes an alternatives
There’s a webstore that i am trying to find a XSS vulnerability for BUG BOUNTY.
On that store is a search bar that i can send anything
https://www.examplestore.com/blog/?s=</title><script>alert(1);</script>
But even if i… Continue reading Why can’t we close some tags for cross site scripting purposes?
On my website, there is a store. The store uses CouchCMS to display the pages and store information about the items available for purchase. There is a purchase button on the item page that allows you to purchase that item, here is its code… Continue reading How do I stop users from changing the price of items in my shop? [migrated]
Attackers are using the “ZeroFont” technique to manipulate the preview of a message to suggest it had already been scanned for threats.
Read more in my article in the Tripwire State of Security blog. Continue reading ZeroFont trick makes users think that message has been scanned for threats