Collaborate Disseminate
In my security course, I have to create an attack that will steal the victim’s username and password, even if the victim is diligent about only entering their password when the URL address bar is correct. The solution needs to be an HTML d… Continue reading How to perform XSS attack on site using htmlspecialchars
I’ve recently gotten into web security and javascript and I think this looks like apretty promising DOM XSS:
let hastagIntentos = 0
, posAnterior = 0
, reintentosHatagPos = 0;
function enlacesParciales() {
if (window.location.hash…. Continue reading Possible window.location.hash DOM XSS
Let’s say the Content Security Policy looks like this:
Content-Security-Policy: default-src ‘self’;
It’s also not possible to upload JS files on the same origin.
Now there’s an exploit to write arbitrary HTML on a page, including <scri… Continue reading Should I call a vulnerability XSS even though it is blocked by the CSP?
Details
I have an application running behind an Azure Web Application Firewall (WAF) on an Azure Application Gateway (AppGW) that was previously on an on-premises server. Since moving it to Azure, users and testers are now getting 403 Forb… Continue reading String in JSON message body blocked by Azure WAF with OWASP 3.1 returning 403
In the last few days, I received a challenge. This challenge was based on an XSS vulnerability reflected in a website.
When the site makes a certain request via POST, in the body there is a parameter that allows script injections. I alread… Continue reading XSS reflected in a parameter via POST (Body)
I know that Apache Tomcat can communicate with US_ASCII encoding, which gives an interesting vector to XSS, such as:
¼script¾alert(¢XSS¢)¼/script¾
Is there a request syntax that would make other servers possibly vulnerable in the same way… Continue reading XSS by methods of ASCII on servers other than Apache Tomcat
If a potential attacker was able to upload a cross-origin <iframe> element to your website as a post of some sort, what could they actually do through it? I know that cross-origin <iframe> elements are able to do simple stuff l… Continue reading What XSS attacks could somebody perform through an iframe?
The payload is qwh9g(a)nz6y9.
I found that payload but can’t guess how it works but it is supposed to work as a reflected xss. I tried other payloads on the same directory but those don´t work.
It’s supposed to work at https://example.com/… Continue reading How is this xss payload encoded? [closed]
Can at this code the input.value be a Dom-XSS sink?
let qs=new urlsearch(location.search);
let paramValue=qs.param;
let input=document.getElementByID(‘inputField’);
input.value=paramValue;
I tried these payloads, but they don’t work.
>… Continue reading Can the value attribute of input tag be a DOM-XSS sink?
Can at this code the input.value be a Dom-XSS sink?
let qs=new urlsearch(location.search);
let paramValue=qs.param;
let input=document.getElementByID(‘inputField’);
input.value=paramValue;
I tried these payloads, but they don’t work.
>… Continue reading Can the value attribute of input tag be a DOM-XSS sink?