Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[idea]Making reflected XSS useful again with a user agent check[idea]

Can't you theoretically link a person to a site that checks their user agent and it does something based on the browser, if their not using firefox for example it will tell them their browsers not supported and to open firefox and if the user agent check passes it will do a meta redirect to the xss payload which will execute sidestepping the need to look for a filter bypass in chrome/edge/etc.Thoughts? may try this soon. It's basically using a convincing UI with SE to cause them to switch to a non xss filter browser such as firefox.If this works which it should, alot of the reflected XSS payloads I have will be insanely useful for targeted client side attacks.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by SIM-5186353Aug 2, 2024 04:00 PM 1 132 Aug 2, 2024 04:00 PM
Last Post: w0rd
by Gee4rceApr 19, 2021 06:47 AM 26 4,064 Apr 19, 2021 06:47 AM
Last Post: theghostofgreen
by longwenzhangDec 12, 2019 07:54 AM 0 229 Dec 12, 2019 07:54 AM
Last Post: longwenzhang