[Jtwa]

Is this site sqli vulnerable? And what do you guys usually do if you want to target a specific site? If not, what would you recommend to find a vulnerability other than sqli?

Base64 encoded:
aHR0cHM6Ly93d3cuYWxsbm92YXNjb3RpYS5jb20vaW5kZXgucGhwP3BnZ2V0PTE=

[ridhisidhi12]

No site is not vulnerable to sqli
35 Characters

[Jtwa]

How would i go about finding the vulnerability?

[SecureHatz]

you can use acunetix web program for search

[Jtwa]

I just ran the software and the site is vulnerable to 74 cross site scripting urls

I'm reading a tutorial and I've tried inputing different alert messages

Here is the one I inputted which gave me a different result

</SCRIPT>"><SCRIPT>alert(String.fromCharCode(88,83,83))

Is the site vulnerable ?

[Lamer]

Post in web hacking section for XSS please :)

[Jtwa]

Can a moderator move this thread to the XSS section? I can post a new thread if that cannot be done

Thanks in advance

[cubicandsqar]

No site is not vulnerable to sqli
35 Characters

No site? well can you help me out with this site: cia.gov
It would be greatly appreciated.

[myrules]

where is the...... website
cant find...... :(
could some one......help for find the site......plz