+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: dorks for code injection XSS (/showthread.php?tid=6279615)
dorks for code injection XSS - famedgod6 - Sep 12, 2024
does anyone have any google dorks to find website that will be vulnerable to URL XSS?
to find websites that I can potentially put Malicious code into the URL of a website?
RE: dorks for code injection XSS - #AfterDark - Sep 12, 2024
Please do some more research on reflected xss and persistent xss.
XSS is most common in form fields such as search fields and submission boxes. So to answer your question. Look for google dorks that target submission forms/ search forms ;)
RE: dorks for code injection XSS - eddie_1600 - Sep 12, 2024
Site metatags have no correlation to how input is processed on the backend, so to answer your question: what you're looking for doesn't exist.
RE: dorks for code injection XSS - famedgod6 - Sep 13, 2024
(Sep 12, 2024 09:27 PM)eddie_1600 Wrote: Site metatags have no correlation to how input is processed on the backend, so to answer your question: what you're looking for doesn't exist.
URL XSS is like the most basic XSS that exists, in literally every tutorial that exists, it shows malicious code being put into the URL bar, and I have done it before
It exists because I have done it, here is a website I defaced by entering HTML code into a URL string: https://tinyurl.com/lulzy86768
so it clearly does
RE: dorks for code injection XSS - eddie_1600 - Sep 15, 2024
(Sep 13, 2024 02:31 PM)famedgod6 Wrote: URL XSS is like the most basic XSS that exists, in literally every tutorial that exists, it shows malicious code being put into the URL bar, and I have done it before
It exists because I have done it, here is a website I defaced by entering HTML code into a URL string: https://tinyurl.com/lulzy86768
so it clearly does
Yes you're not wrong, but Google dorking is simply a tool which allows you to sort/filter search results using metadata about particular sites (domain name, metatags, body content, etc). But none of this information can be used to guess how input is processed on the backend or whether there is an XSS exploit, unless you are looking for some certain instances of web applications which have a known vulnerability. But it's unlikely you will find something this way which hasn't already been touched by the troves of newbs looking to prove themselves
RE: dorks for code injection XSS - hackermenace247 - Sep 16, 2024
(Sep 12, 2024 04:20 PM)famedgod6 Wrote: does anyone have any google dorks to find website that will be vulnerable to URL XSS?
to find websites that I can potentially put Malicious code into the URL of a website?
Normally I use exploit-db.com on Google cause you can search for Google ddorks and find exploit details like how to reconstruct the attack and the type of vulnerability it has. So have fun but remember its www.exploit-db.com
RE: dorks for code injection XSS - AmadeusHF - Sep 17, 2024
you can find a lot of working dorks in github pages
RE: dorks for code injection XSS - bbbbbbbfbfbfbbbb - Sep 18, 2024
No point in responding if you don't know what you're talking about...
portswigger.net/research/exploiting-xss-in-hidden-inputs-and-meta-tags
[deleted] [warn]
RE: dorks for code injection XSS - Leeriz - Sep 20, 2024
(Sep 13, 2024 02:31 PM)famedgod6 Wrote: URL XSS is like the most basic XSS that exists, in literally every tutorial that exists, it shows malicious code being put into the URL bar, and I have done it before
It exists because I have done it, here is a website I defaced by entering HTML code into a URL string: https://tinyurl.com/lulzy86768
so it clearly does
can you say please how to use xss to deface the website entirely
RE: dorks for code injection XSS - mariomotva - Nov 28, 2024
I buy a geolocation tool for cell phones.
[/quote]
private messages
RE: dorks for code injection XSS - Chorozon - Nov 29, 2024
(Sep 12, 2024 04:20 PM)famedgod6 Wrote: does anyone have any google dorks to find website that will be vulnerable to URL XSS?
to find websites that I can potentially put Malicious code into the URL of a website?
Use something like subfinder ( github.com/projectdiscovery/subfinder )
Scan the site and list the subdomains and use something like XSStrike or Subzy to scan the sites for XSS vulns