+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: XSS with open redirect (/showthread.php?tid=4384204)
XSS with open redirect - michael1026 - Aug 8, 2014
So, let's say I have a page that redirects anywhere, I can XSS the page by redirecting it to javascript:alert(0);, but the current page I'm working on doesn't try redirecting that, only offers a link (yes, this is XSS, but as part of their security, they don't consider that a bug). This page will redirect anywhere else, though. Is there anything else that will work?
* - Cybele - Aug 8, 2014
PM me your skype/xmpp please. I'd like to take a look.
* - Avocado - Aug 8, 2014
I don't understand what you are asking, have you found an XSS? or are you trying to get an XSS? or do you want other ideas for open redirects?
* - -Acid - Aug 8, 2014
(Aug 8, 2014 02:43 AM)michael1026 Wrote: So, let's say I have a page that redirects anywhere, I can XSS the page by redirecting it to javascript:alert(0);, but the current page I'm working on doesn't try redirecting that, only offers a link (yes, this is XSS, but as part of their security, they don't consider that a bug). This page will redirect anywhere else, though. Is there anything else that will work?
they don't allow this as a bug because at the panel where you try to XSS,may be the is option to use some unfiltered keywords and whatever you will try,it does not helps you to create a proper proof for the presence of bug as it allows the unfiltered keywords.
If you are able to get XSS on some other page of the site may be it helps you.Try to find some other vulnerabilities on that site.
If you wanna PM me you can do related to site,I'll take a quick look on it.
🤝