[MajinVegeta]

Hey all,

I need a example/ripped Website with Non-pers. Vuln. for Local host.
Does someone has such a site?

I want to test a XSS Attack on myself.
Furthermore I want to test the cookielogging and beef before using it on a real site.
I want to make sure that its really working like I think. I dont want to be surprised with things that i dont know. So i will prepare myself on localhost.

Would be awesome if someone shares with me such a site.

Maybe someone already hacked such a site and ripped it?

background: https://hackforums.net/showthread.php?tid=3726581

[austrian-1nj3ct0r]

Use "Damn Vulnerable Web App" http://www.dvwa.co.uk/

[VipVince]

Just a simple PHP search:

PHP Code


<?php 
<form action="" method="POST"> 
<b>Search for:</b><br> 
<input type="text" name="search"><br> 
<input type="submit" value="Submit"><br> 
<br> 
</form>  
<?php 

$xss = ($_POST["search"]);

echo "You searched for $xss";

?>

Adjust if you want to do it via GET request.

[EXPLICIT CONTENT]

Just a simple PHP search:

PHP Code


<?php 
<form action="" method="POST"> 
<b>Search for:</b><br> 
<input type="text" name="search"><br> 
<input type="submit" value="Submit"><br> 
<br> 
</form>  
<?php 

$xss = ($_POST["search"]);

echo "You searched for $xss";

?>

Adjust if you want to do it via GET request.

PHP Code


<?php 
<form action="" method="POST"> 
<b>Search for:</b><br> 
<input type="text" name="search"><br> 
<input type="submit" value="Submit"><br> 
<br> 
</form>  
<?php 
if(isset($_POST['search']))
{
$xss = ($_POST['search']);
echo "You searched for $xss";
}
?>

Should be better ;)

[MajinVegeta]

@austrian-1nj3ct0r , thank you this looks nice. I will try this

@VipVince, Codah, thank you . If I put this code into a site, the site will be vuln. right? Is it then possible to steal the session of the admin/of a user with a cookie logger (or with beef?)?

[VipVince]

@austrian-1nj3ct0r , thank you this looks nice. I will try this

@VipVince, Codah, thank you . If I put this code into a site, the site will be vuln. right? Is it then possible to steal the session of the admin/of a user with a cookie logger (or with beef?)?

No, the site has to be hosting a script/file that is vulnerable to XSS, lack of sanitization via a PHP security function is what causes it. Once/if you have triggered an XSS via a vector, you can try

PHP Code


<?php 
<script>alert(document.cookie)</script> 


to see if it captures your own cookies, then get yourself a cookie-logger and manipulate the URL and attempt to have the admin click it. I did a tutorial on bEEF a long time ago, it only works on seriously old outdated clients browsers.

[MajinVegeta]

No, the site has to be hosting a script/file that is vulnerable to XSS, lack of sanitization via a PHP security function is what causes it. Once/if you have triggered an XSS via a vector, you can try

honestly, i didnt understand what you said. what script/file do you mean?
Sorry for being such a noob, but i am completely new to XSS and I have no PHP Knowledge. Thats why I am searching for an example/ripped site that is already vuln. I m not able to code my own scripts that makes the site vuln.

PHP Code


<?php 
<script>alert(document.cookie)</script> 


to see if it captures your own cookies, then get yourself a cookie-logger and manipulate the URL and attempt to have the admin click it. I did a tutorial on bEEF a long time ago, it only works on seriously old outdated clients browsers.

so this means, i should stick with a simple cookie logger. Strange, that some ppl recommended bEEf, although its outdated...