+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [idea]Making reflected XSS useful again with a user agent check[idea] (/showthread.php?tid=5472183)
[idea]Making reflected XSS useful again with a user agent check[idea] - ๖ۣۜCriminal - Nov 22, 2016
Can't you theoretically link a person to a site that checks their user agent and it does something based on the browser, if their not using firefox for example it will tell them their browsers not supported and to open firefox and if the user agent check passes it will do a meta redirect to the xss payload which will execute sidestepping the need to look for a filter bypass in chrome/edge/etc.Thoughts? may try this soon. It's basically using a convincing UI with SE to cause them to switch to a non xss filter browser such as firefox.If this works which it should, alot of the reflected XSS payloads I have will be insanely useful for targeted client side attacks.