+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: how to exploit AJAX from client (/showthread.php?tid=5752959)
how to exploit AJAX from client - nothing_as - Nov 14, 2017
hi Friends,
i found some security file .js and How can exploit AJAX function from client?
-- example function --
function getRaw(user, id){
var usr = $('#user-carts').text();
window.open('website?method=raw&user=' + (usr ? usr : user) + '&product=' + $('#purchases_product').val() + '&id=' + id, '_blank');
}
Can bypass authentication and call this function from client to get raw? any sugestion for me. Thanks
RE: how to exploit AJAX from client - Berry White - Nov 14, 2017
I think you can try to look if one of this parameters are vulnerable to SQLi.
website.com?method=raw&user=1&product=1&id=1