Hack Forums
[GOVT SITE] Found a non persistent XSS - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [GOVT SITE] Found a non persistent XSS (/showthread.php?tid=3729833)

[GOVT SITE] Found a non persistent XSS - g0han - Sep 1, 2013

I just started learning XSS, and today i found a non persistent XSS in a government site in my country :) I have reported this vulnerability to them and am waiting to here back.

1280x800 Image:
Spoiler (Click to View)

I Haven't done anything malicious. Just tested it out, I know its nothing great but I was just pleased because its been my first actual XSS.

* - 133720 - Sep 1, 2013

Congrats! In my opinion,You are white hat.

I also test on your gov site:got it ,I'm white help

Really thanks.

* - Krieg - Sep 1, 2013

You found a nonpersistent XSS?
I found a nonpersistent fuck to give!

* - Im gone brah - Sep 2, 2013

(Sep 1, 2013 08:10 PM)Krieg Wrote:  You found a nonpersistent XSS?
I found a nonpersistent fuck to give!

Yeah, indeed.

op, Gov sites got terrible protection.. Even worse than a normal company.🤫

* - iPodWoman - Sep 2, 2013

http://www.napier.govt.nz/index.php?pid=168
Yay

* - Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ - Sep 2, 2013

http://www.defencejobs.gov.au/army/jobs/GeneralServiceOfficer/?entryTypeId=%22%3E%3Cscript%3Ealert%281%29%3C/script%3E

Am I special now?

* - im_a_skid - Sep 2, 2013

1. http://www.napier.govt.nz/

2. This shit is vuln to <script>alert("XsS PAKI")</script>

3. you can't even save the search.

Spoiler (Click to View)

(Sep 2, 2013 06:41 AM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  http://www.defencejobs.gov.au/army/jobs/GeneralServiceOfficer/?entryTypeId=%22%3E%3Cscript%3Ealert%281%29%3C/script%3E

Am I special now?

aush0k level xss