Hi guys, I made a tutorial sort of like this this morning. Except it's with HTML Forms to persistent XSS. In this tutorial, I'll be explaining how you can get persistent XSS from a simple file upload. You can do it with any file extension too (prefferably an image file (.png, .jpg)). This is sort of the same method as in my other tutorial, we will need Tamper Data again.

So first of all, let's find a vulnerable page. I'm not sure if this method is public or not (I'm sure it is, because it's not a bad idea, except I haven't seen it around). I actually tested this method on an XSS challenge made by a friend of mine (ring0_).

Once you've found a vulnerable site (It'll be hard to tell if it's vulnerable or not though.) open select your file. I will choose a file "TrollFaic.png". I actually have that file on my PC, and I do use it for this LOL. Now, open tamper data, and start tampering. Once you find the right request to edit, edit it. Change the file name to "<img src=javascript:alert("XSS");>.png". If a broken image pops up instead of an alert, use this vector: "<img src="XSS" onerror=alert("XSS");>.png". That should do it.

As long as the file stays there, it should keep shooting up alert boxes. If you have any questions, requests, or comments, just PM me and I'll get back to you as soon as I can!

Thanks for reading this tutorial!