[famedgod6]

does anyone have any google dorks to find website that will be vulnerable to URL XSS?

to find websites that I can potentially put Malicious code into the URL of a website?

[#AfterDark]

Please do some more research on reflected xss and persistent xss.

XSS is most common in form fields such as search fields and submission boxes. So to answer your question. Look for google dorks that target submission forms/ search forms ;)

[eddie_1600]

Site metatags have no correlation to how input is processed on the backend, so to answer your question: what you're looking for doesn't exist.

[famedgod6]

Site metatags have no correlation to how input is processed on the backend, so to answer your question: what you're looking for doesn't exist.

URL XSS is like the most basic XSS that exists, in literally every tutorial that exists, it shows malicious code being put into the URL bar, and I have done it before


It exists because I have done it, here is a website I defaced by entering HTML code into a URL string: https://tinyurl.com/lulzy86768


so it clearly does

[eddie_1600]

URL XSS is like the most basic XSS that exists, in literally every tutorial that exists, it shows malicious code being put into the URL bar, and I have done it before


It exists because I have done it, here is a website I defaced by entering HTML code into a URL string: https://tinyurl.com/lulzy86768


so it clearly does

Yes you're not wrong, but Google dorking is simply a tool which allows you to sort/filter search results using metadata about particular sites (domain name, metatags, body content, etc). But none of this information can be used to guess how input is processed on the backend or whether there is an XSS exploit, unless you are looking for some certain instances of web applications which have a known vulnerability. But it's unlikely you will find something this way which hasn't already been touched by the troves of newbs looking to prove themselves

[hackermenace247]

does anyone have any google dorks to find website that will be vulnerable to URL XSS?

to find websites that I can potentially put Malicious code into the URL of a website?

Normally I use exploit-db.com on Google cause you can search for Google ddorks and find exploit details like how to reconstruct the attack and the type of vulnerability it has. So have fun but remember its www.exploit-db.com

[AmadeusHF]

you can find a lot of working dorks in github pages

[bbbbbbbfbfbfbbbb]

No point in responding if you don't know what you're talking about...

portswigger.net/research/exploiting-xss-in-hidden-inputs-and-meta-tags

Content deleted to prevent possible harm to our members. -Staff

The member who made this post was warned. In some way it violates our rules or policies.
Please familiarize yourself by reading our Help Documents.

[Leeriz]

URL XSS is like the most basic XSS that exists, in literally every tutorial that exists, it shows malicious code being put into the URL bar, and I have done it before


It exists because I have done it, here is a website I defaced by entering HTML code into a URL string: https://tinyurl.com/lulzy86768


so it clearly does

can you say please how to use xss to deface the website entirely

[mariomotva]

I buy a geolocation tool for cell phones.
[/quote]

private messages

[Chorozon]

does anyone have any google dorks to find website that will be vulnerable to URL XSS?

to find websites that I can potentially put Malicious code into the URL of a website?

Use something like subfinder ( github.com/projectdiscovery/subfinder )

Scan the site and list the subdomains and use something like XSStrike or Subzy to scan the sites for XSS vulns