+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Cross Site Scripting Attack(verified) (/showthread.php?tid=5561065)
Cross Site Scripting Attack(verified) - TigerHr - Feb 26, 2017
I recently found a cross site scripting vulnerability in a login.php file.
The attack details displayed this message :
URL encoded POST input username was set to iktmnonr" onmouseover=prompt(928677) bad="
The input is reflected inside a tag parameter between double quotes.
Please, i want someone to help me how i do exploit this vunlerability?
* - NationalSecurityAgency - Feb 26, 2017
I Can i know alot about XSS. If you either send me your skype. I'm more than happy to help you out.
* - rone3xche - Feb 27, 2017
You can send malicious js to the victim and work as keylogger