Jul 1, 2023 06:22 AM
(This post was last modified: Jul 5, 2023 10:49 PM by Sky.)
I FOUND A VULNERABLE SITE THAT USES OLDER VERSION OF JQUERY(2.2.4) WHICH IS VULNERABLE TO XSS
IN DOCUMENTATION OF CVE-2015-9251 THEY SAID: jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
but i dont know how to exploit it can any one help ? [warn]
I mean, you basically answered your own question but you can exploit it with an XSS attack and use JS to exploit it.
My preferred XSS scanner is XSStrike. It will test a site for XSS and provide exploits that are successful.
Jul 5, 2023 12:07 PM
(This post was last modified: Jul 5, 2023 12:10 PM by scannereyefox.)
(Jul 3, 2023 02:21 PM)DramaKing Wrote: My preferred XSS scanner is XSStrike. It will test a site for XSS and provide exploits that are successful.
BRO IT WORKS BUT I DONT KNOW HOW TO EXPLOIT THAT AND THIS TOOL IS REALLY GREAT THANKYOU
(Jul 3, 2023 02:05 PM)naturewizard69 Wrote: I mean, you basically answered your own question but you can exploit it with an XSS attack and use JS to exploit it.
IAM A NEWBIE BRUH I FOUND THAT BY AUTOMATED SCAN AND I REALLY SEARCHED FOR ITS VULNERABILITY BUT I DON'T KNOW TO EXPLOIT IT IF YOU HAVE ANY RESOURCE GIVE ME PLZ
Just google "how to make a cross-domain Ajax request" And do that for the site you are using.
Jul 5, 2023 05:54 PM
(This post was last modified: Jul 6, 2023 06:52 AM by DramaKing.)
(Jul 5, 2023 02:07 PM)naturewizard69 Wrote: Just google "how to make a cross-domain Ajax request" And do that for the site you are using.
Agreed. I can't find a POC, so do your own research. Also, make sure you know what you're doing and don't be an idiot.
(Jul 5, 2023 05:54 PM)DramaKing Wrote: I can't find a POC, so do your own research. Also, make sure you know what you're doing and don't be an idiot.
Why quote me on this?
Because I was concurring. Sorry for not being clear.
Jul 6, 2023 09:04 AM
(This post was last modified: Jul 6, 2023 09:05 AM by scannereyefox.)
(Jul 5, 2023 02:07 PM)naturewizard69 Wrote: Just google "how to make a cross-domain Ajax request" And do that for the site you are using.
THANK YOU BRO IT HELPED ME A LOT
(Jul 5, 2023 05:54 PM)DramaKing Wrote: Agreed. I can't find a POC, so do your own research. Also, make sure you know what you're doing and don't be an idiot.
OK BRUH I GETTHAT FROM YOUR POINT OF YOU THANKS
(Jul 6, 2023 09:04 AM)scannereyefox Wrote: THANK YOU BRO IT HELPED ME A LOT
OK BRUH I GETTHAT FROM YOUR POINT OF YOU THANKS
No problem hmu if you have any more questions
(Jul 6, 2023 09:37 AM)naturewizard69 Wrote: No problem hmu if you have any more questions
YEAH SURE
|
