XSS OWASP | Cross site Scripting

XSS OWASP | Cross site Scripting - What is it ?

What is Cross site scripting or XSS?

XSS is ranked among the top 3 Web App Vulnerabilities in OWASP.
It is basically the injection of Scripts that run on the web, JavaScript(JS).
The Scripts are called the Payloads. For example, alert(document.domain) or any inline scripts like <img src=x onerror = alert("XSS exists")>

What's the use of XSS?

Well, you could steal the cookies of other users. What are Cookies? Cookies are small piece of data that is sent by the server of the Web Application so that it may know you are an authenticated user.

Here is an example of the alert box of the executed JS code.
I injected an inline script that you see it as a broken image. Now you Click on the image -->

Did your browser prompt an alert box?
Yes.... the script is executed.

If you could execute the script you entered. You could inject your own piece of JS scripts inside the web Apps and could do anything with the user account like sending a friend request on facebook or delete an email. Basically you own the entire account of the user or your GIRLFRIEND's 👩😂.

How to exploit?
1. Inject the JS codes in the Input fields you find.
2. Replace the values of the parameter in URL with the XSS Payloads

If you inject the payload and seems that it got executed you would see an alert box prompted by your browser.

Comments

Google form setting Bypass - Making my way to the Google's Hall of Fame !

G o o g l e ! Bug : Circumventing "Limit to 1 response" of Google forms ( Parameter Injection ) Discovered on: 30th, November 2016. Research Time: 2:00 p.m to 9:30 p.m. Earn more by display ads on blog with Lithific Ads The setting is "Limit to 1 response" which means only one response per user. Once you filled the form there will be no chance to edit the responses or again fill a new form. If you open the form to fill again, the response would be like the image below. There is no way to edit or fill another form (Hurdle 1). I created a test form and checked "Edit after submit". Once this test form is filled I can change the previous response. I clicked on the "Edit your response"and intercepted the request. I changed the form id and forwarded the request. I was able to see the form that was submitted. When I edited the form and submitted, a blank form was sent. (Hurdle 2). I analysed the requests f

Facebook Bug Bounty $$$$ : Crossposting Live Videos | Facebook Live

In the Facebook Page Settings, you could setup the option for Crossposting Live videos from other pages. The Attacker's page adds a Page (Victim's Page) for crossposting their videos Victim Page's Admin accepts the approval and the default option is Crossposting videos without further approval The Attacker starts live video and selects Victim's Page in the "Crosspost to more pages" Victim visits the Crossposting page in the Page settings and and removes Attacker's Page Attacker selects "Use camera" and clicks on "Go Live". The Victim's Page starts automatically crossposting the live video of Attacker, Bug Bounty of $500

Facebook Messenger bug. React to any message on behalf of a Facebook Page

Reacting to Facebook Messages An Admin can interact with his Facebook Page through Facebok page's Inbox, there is no UI to react to the messages like HAHA, LOVE etc. Reply to the messages . You must be knowing about the WhatsApp messenger's Reply feature where you can reply to a particular message. There is something for Facebook messenger too. You can reply to message by hovering over the message and there will be "Reply" option. Click on that. Now type some random message and click on "Send" and intercept the request. You can find in the HTTP Request that there is a parameter "message_id" in the message body. Change to some other message_id that doesn't belong to chat that you currently opened. Now I sent the request. There was an error that was thrown saying .. "The content is longer available". Now my next adventure to try to find a bug in the Messaging continues. If you have a conversation with your girlfriend you can alway

Yaswanth Mangalagiri

Search This Blog