Hack Forums
Some XSS Dorks - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Some XSS Dorks (/showthread.php?tid=4554923)

Some XSS Dorks - nondescriptoldie - Nov 25, 2014

Hello HF members! Here I have some XSS Dorks for you guys! ;)


Code
inurl:search.php?

inurl:find.php?

inurl:search.html

inurl:find.html

inurl:search.aspx

inurl:find.aspx

inurl:".php?cmd="

inurl:".php?z="

inurl:".php?q="

inurl:".php?search="

inurl:".php?query="

inurl:".php?searchstring="

inurl:".php?keyword="

inurl:".php?file="

inurl:".php?years="

inurl:".php?txt="

inurl:".php?tag="

inurl:".php?max="

inurl:".php?from="

inurl:".php?author="

inurl:".php?pass="

inurl:".php?feedback="

inurl:".php?mail="

inurl:".php?cat="

inurl:".php?vote="

inurl:search.php?q=

inurl:com_feedpostold/feedpost.php?url=

inurl:scrapbook.php?id=

inurl:headersearch.php?sid=

inurl:/poll/default.asp?catid=

inurl:/search_results.php?search=


Hope I helpes some of you guys out! :)


* - la couille - Nov 25, 2014

thanks you very much for this list :)

* - Fl0urite - Nov 25, 2014

You forgot guestbook, also, these look like they are only temporary XSS, anyway, thanks.

* - ♆ ∂їş†∪яßΣ∂ ♆ - Nov 25, 2014

Great thread Darkcoreiscool,

This is a really helpful thread for all members! 🤝

* - ๖ۣۜSmurf - Nov 25, 2014

Thank you for the list, very helpful indeed :)

* - nondescriptoldie - Nov 25, 2014

Thanks guys for your appreciation! :)

* - ExplodingKnees - Nov 25, 2014

They're completely pointless and you're wasiting your time.

* - Dr. Gonzo - Nov 25, 2014

Do you think that these would also work as SQLI dorks or no? Just wondering.

* - ๖ۣۜCriminal - Nov 26, 2014

(Nov 25, 2014 01:45 PM)ExplodingKnees Wrote:  They're completely pointless and you're wasiting your time.

holy shit I can't tell if you're trolling you can:
- send any GET/POST request on victims behalf just like a CSRF vuln except xss can parse CSRF tokens and make token protection for CSRF useless
- steal cookies(not as useful because most sites set the HTTPONLY flag which prevents cookie stealing nowadays)
- parse any javascript on a page which is useful for stealing facebook chat logs if you had a facebook xss for example
- turn on victims webcam
- geolocation to get someones exact address for a dox
and many more fun things
dude I pwned a vbulletin site with a reflected XSS one time, coded a payload that priv escalated my self to the admin panel, sqli'ed a vuln parameter on one of the admin endpoints and the site got owned, you'd be suprised man.

* - ExplodingKnees - Nov 26, 2014

(Nov 26, 2014 07:37 AM)maybeBlue Wrote:  holy shit I can't tell if you're trolling you can:
- send any GET/POST request on victims behalf just like a CSRF vuln except xss can parse CSRF tokens and make token protection for CSRF useless
- steal cookies(not as useful because most sites set the HTTPONLY flag which prevents cookie stealing nowadays)
- parse any javascript on a page which is useful for stealing facebook chat logs if you had a facebook xss for example
- turn on victims webcam
- geolocation to get someones exact address for a dox
and many more fun things
dude I pwned a vbulletin site with a reflected XSS one time, coded a payload that priv escalated my self to the admin panel, sqli'ed a vuln parameter on one of the admin endpoints and the site got owned, you'd be suprised man.
I find the difference between your technical knowledge and your comprehension skills amusing. I never once stated XSS(Reflected, DOM, any other kind) is useless. XSS Dorks are. XSS is more of a subtle attack that aims towards being useful against clients of a website; dorking out random targets for websites nobody heard about is redundant. Targeting high-profile websites, mapping them out and delicately finding XSS holes is a different story. This thread is not how you exploit XSS.

* - ๖ۣۜCriminal - Nov 26, 2014

(Nov 26, 2014 08:44 AM)ExplodingKnees Wrote:  I find the difference between your technical knowledge and your comprehension skills amusing. I never once stated XSS(Reflected, DOM, any other kind) is useless. XSS Dorks are. XSS is more of a subtle attack that aims towards being useful against clients of a website; dorking out random targets for websites nobody heard about is redundant. Targeting high-profile websites, mapping them out and delicately finding XSS holes is a different story. This thread is not how you exploit XSS.

Oh lol I thought you meant XSS in general is useless you should of been more specific also XSS doesn't even need dorks OP is another retard who must be new to sqli pretty much any site that uses javascript with no input validation has an xss vuln somewhere there like so easy to find.

* - ExplodingKnees - Nov 26, 2014

(Nov 26, 2014 09:50 AM)maybeBlue Wrote:  Oh lol I thought you meant XSS in general is useless you should of been more specific also XSS doesn't even need dorks OP is another retard who must be new to sqli pretty much any site that uses javascript with no input validation has an xss vuln somewhere there like so easy to find.
I said: "They're"
They're = Plural. Thread title: XSS Dorks. I guess I could've been more clear, but that goes the same towards you.