Hello Folks, i want to tell my story of this type of XSS.
"><svg+svg+svg\/\/On+OnLoAd=confirm(1)>Why this payload work?
…In my case, i was in front of an application that my payload was closed by Unicode Character.
Example:
"><svg/onload=alert(1)>This Payload was Blocked:
“><sv\u01234\g\u01235/on\u01236load=confirm(1)>I This case i tryied to use…
In first, i found my subdomain using Amass tool.
After i used ffuf tool for brute force the directories and i found an Improper access control: https://subdomain.xxx.com/phppgadmin
There was a page with need to submit credentials, user and password.
I tried some combination of user/password with googling, and thanks to…
Hello, nice writeup, can you send me which hackbar are you using please? Thank you my friend
Note: I will not mention the companies, for reasons of privacy and confidentiality.
A SQL Injection attack consists of insertion or “injection” of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database…
Difficulty: Medium/Hard
Difficulty: Medium
Difficulty: Easy/Medium
Difficulty: Medium
Difficulty: Easy/Medium (In my opinion)
Difficulty: Medium (Windows)
