+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE (/showthread.php?tid=6245396)
HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - scannereyefox - Jul 1, 2023
I FOUND A VULNERABLE SITE THAT USES OLDER VERSION OF JQUERY(2.2.4) WHICH IS VULNERABLE TO XSS
IN DOCUMENTATION OF CVE-2015-9251 THEY SAID: jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
but i dont know how to exploit it can any one help ? [warn]
RE: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - naturewizard69 - Jul 3, 2023
I mean, you basically answered your own question but you can exploit it with an XSS attack and use JS to exploit it.
RE: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - DramaKing - Jul 3, 2023
My preferred XSS scanner is XSStrike. It will test a site for XSS and provide exploits that are successful.
RE: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - scannereyefox - Jul 5, 2023
(Jul 3, 2023 02:21 PM)DramaKing Wrote: My preferred XSS scanner is XSStrike. It will test a site for XSS and provide exploits that are successful.
BRO IT WORKS BUT I DONT KNOW HOW TO EXPLOIT THAT AND THIS TOOL IS REALLY GREAT THANKYOU
(Jul 3, 2023 02:05 PM)naturewizard69 Wrote: I mean, you basically answered your own question but you can exploit it with an XSS attack and use JS to exploit it.
IAM A NEWBIE BRUH I FOUND THAT BY AUTOMATED SCAN AND I REALLY SEARCHED FOR ITS VULNERABILITY BUT I DON'T KNOW TO EXPLOIT IT IF YOU HAVE ANY RESOURCE GIVE ME PLZ
RE: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - naturewizard69 - Jul 5, 2023
Just google "how to make a cross-domain Ajax request" And do that for the site you are using.
RE: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - DramaKing - Jul 5, 2023
(Jul 5, 2023 02:07 PM)naturewizard69 Wrote: Just google "how to make a cross-domain Ajax request" And do that for the site you are using.
Agreed. I can't find a POC, so do your own research. Also, make sure you know what you're doing and don't be an idiot.
RE: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - naturewizard69 - Jul 5, 2023
(Jul 5, 2023 05:54 PM)DramaKing Wrote: I can't find a POC, so do your own research. Also, make sure you know what you're doing and don't be an idiot.
Why quote me on this?
RE: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - DramaKing - Jul 6, 2023
Because I was concurring. Sorry for not being clear.
RE: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - scannereyefox - Jul 6, 2023
(Jul 5, 2023 02:07 PM)naturewizard69 Wrote: Just google "how to make a cross-domain Ajax request" And do that for the site you are using.
THANK YOU BRO IT HELPED ME A LOT
(Jul 5, 2023 05:54 PM)DramaKing Wrote: Agreed. I can't find a POC, so do your own research. Also, make sure you know what you're doing and don't be an idiot.
OK BRUH I GETTHAT FROM YOUR POINT OF YOU THANKS
RE: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - naturewizard69 - Jul 6, 2023
(Jul 6, 2023 09:04 AM)scannereyefox Wrote: THANK YOU BRO IT HELPED ME A LOT
OK BRUH I GETTHAT FROM YOUR POINT OF YOU THANKS
No problem hmu if you have any more questions
RE: HELP ME TO EXPLOIT CVE-2015-9251 URGENT HELP PLEASE - scannereyefox - Jul 8, 2023
(Jul 6, 2023 09:37 AM)naturewizard69 Wrote: No problem hmu if you have any more questions
YEAH SURE