Spoof Call and Spoof SMS set any caller ◆ ProxiesFood: Unlimited Residential Proxy ◆ Cheap KYC Verifications & Openups ◆ Anvilpoint CyberOps - Hacker for Hire ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Whitehat • Blue Team • Defensive Security Pentesting and Forensics › Bypassing XSS filters?

New Reply 

Bypassing XSS filters?
Abducted
Abducted Offline
OSCP
***
HF l33t
Posts:
1,387
Threads:
204
Credibility:
3500
Popularity:
404
βytes:
β 0
Game XP:
3,956
Nov 10, 2016 03:19 PM (This post was last modified: Nov 10, 2016 03:26 PM by Abducted.)
Hey, could anyone help me bypassing some browser XSS filters? If you think you might do it leave a post so I can shoot you a PM!

Cheers,
Abducted 🤝
I Will Help You Pass OSCP
libc
libc Offline
[closed@HF:]
Posts:
606
Threads:
11
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Nov 10, 2016 03:25 PM
Find which characters the web application filters and construct a payload that doesn't contain them. Try the OWASP cheat sheet.
Abducted
Abducted Offline
OSCP
***
HF l33t
Posts:
1,387
Threads:
204
Credibility:
3500
Popularity:
404
βytes:
β 0
Game XP:
3,956
Nov 10, 2016 03:26 PM
(Nov 10, 2016 03:25 PM)libc Wrote:  Find which characters the web application filters and construct a payload that doesn't contain them. Try the OWASP cheat sheet.

I was talking about browser XSS filters.
Sorry gonna update OP.
I Will Help You Pass OSCP
Straight Grizzly
Straight Grizzly Offline
Social Engineer
**
HF l33t
Posts:
486
Threads:
54
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Nov 10, 2016 07:23 PM
(Nov 10, 2016 03:26 PM)Abducted Wrote:  I was talking about browser XSS filters.
Sorry gonna update OP.

It depends on the browser entirely. When testing a web application, I test for XSS manually through Firefox because their filters seem to be the worst. You would still follow the same methodology that Libc has presented nonetheless
Abducted
Abducted Offline
OSCP
***
HF l33t
Posts:
1,387
Threads:
204
Credibility:
3500
Popularity:
404
βytes:
β 0
Game XP:
3,956
Nov 10, 2016 09:21 PM
(Nov 10, 2016 07:23 PM)Straight Grizzly Wrote:  It depends on the browser entirely. When testing a web application, I test for XSS manually through Firefox because their filters seem to be the worst. You would still follow the same methodology that Libc has presented nonetheless

I need to get Chrome filters bypassed somehow. Thanks for the advice though!
I Will Help You Pass OSCP
LittleBobbyTables
LittleBobbyTables Offline
Always active on irc - pdgn.co
***
HF Ub3r
Posts:
590
Threads:
16
Credibility:
000
Popularity:
12
βytes:
β 0
Game XP:
0
Nov 10, 2016 09:24 PM
(Nov 10, 2016 09:21 PM)Abducted Wrote:  I need to get Chrome filters bypassed somehow. Thanks for the advice though!

Is this a personal test? If so, don't use Chrome.

Outside of that, what are you breaking out of?
Day trading, real estate, contract security. Work wherever, fly for free.
Straight Grizzly
Straight Grizzly Offline
Social Engineer
**
HF l33t
Posts:
486
Threads:
54
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Nov 11, 2016 09:18 AM
(Nov 10, 2016 09:21 PM)Abducted Wrote:  I need to get Chrome filters bypassed somehow. Thanks for the advice though!

Google will provide a wealth of information for you. Knowing what version you need to bypass will help as well.
Fladrif
Fladrif Offline
[user@HF:]
*
Registered
Posts:
132
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
602
Nov 11, 2016 11:18 AM
Have a look at "OWASP Xenotix XSS Exploit Framework" - its a great tool which emulates each of the major browsers, so you can see if your XSS would work on what browser, then start to home in on how to bypass Webkit/Chrome.

But I agree it is a bit of trial and error working out which characters are being filtered. @brutelogic on Twitter is a great resource.
HiddenEyE
HiddenEyE Offline
[email protected]
***
HF l33t
Posts:
979
Threads:
17
Credibility:
000
Popularity:
91
βytes:
β 34
Game XP:
0
Nov 11, 2016 09:44 PM
OP shot me a PM, i can help you on this.
chrome has never been my challenge so far.
#c/c++# & #asm#  


The way to patch bad code is to remove the bad code, not to add new bad code that hides the old bad code 
๖ۣۜAnubis
๖ۣۜAnubis Away
hw/3,4,5-trimethoxyphenylethylamine
***
HF Ub3r
Posts:
979
Threads:
47
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Nov 13, 2016 12:57 PM
Depends on the filters, if for example the filter replace "<" with "\<", you could change your input to "\<" and after the filter aplied, it would be "\\<", wich would work.

[Image: winged_scarab_white.png]
1AnubisAb8YszYn8TboYsBX5tywX9CnNy5
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by mr.crackerAug 2, 2015 08:25 PM 2 145 Aug 2, 2015 08:25 PM
Last Post: mr.cracker
by mr.crackerAug 2, 2015 11:08 AM 0 156 Aug 2, 2015 11:08 AM
Last Post: mr.cracker
by ShihabSoftOct 24, 2014 01:52 AM 0 161 Oct 24, 2014 01:52 AM
Last Post: ShihabSoft