+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Found XSS and now? (/showthread.php?tid=6182196)
Found XSS and now? - PingByte1337 - Nov 23, 2021
Hey Guys,
i try a lot of Websecurity.
Now i found a XSS but what can i now do? Standard Scripts with Alert works but how i got Shell Commands like "whoami" or can login with admin (tried SQLi).
How can help me? thx
![[Image: BteUWK2.png]](https://i.imgur.com/BteUWK2.png)
RE: Found XSS and now? - Beladonis - Nov 23, 2021
XSS is a client-sided attack vector, you can't use server-sided shell commands like "whoami".
RE: Found XSS and now? - G.P.D. - Nov 26, 2021
There is two options : white and black hat option.
Black : You can try to use that vulnerability to steal cookies from the administrator.
White : Inform the administrator that there is a security issue on his website.
RE: Found XSS and now? - Bladabindi - Dec 15, 2021
(Nov 26, 2021 03:07 PM)G.P.D. Wrote: There is two options : white and black hat option.
Black : You can try to use that vulnerability to steal cookies from the administrator.
White : Inform the administrator that there is a security issue on his website.
Great exaplined
RE: Found XSS and now? - gemini220 - Dec 15, 2021
look into beef, then goto demo page and view source. You will see the js which injects the hook, you can inject this into the url, then send this to people through email.
RE: Found XSS and now? - Cyber "Max" Shaman - Jan 5, 2022
either you exploit or report