Nov 22, 2016 09:40 PM
(This post was last modified: Nov 22, 2016 09:44 PM by ๖ۣۜCriminal.)
Can't you theoretically link a person to a site that checks their user agent and it does something based on the browser, if their not using firefox for example it will tell them their browsers not supported and to open firefox and if the user agent check passes it will do a meta redirect to the xss payload which will execute sidestepping the need to look for a filter bypass in chrome/edge/etc.Thoughts? may try this soon. It's basically using a convincing UI with SE to cause them to switch to a non xss filter browser such as firefox.If this works which it should, alot of the reflected XSS payloads I have will be insanely useful for targeted client side attacks.
