Find Stored XSS & HTML Injections Easily
This is a short tutorial to find stored XSS & HTML Injections easily. HTML injections occur when input isn’t sanitized to check or remove code thus, allowing potentially malicious code to execute on a web […]
Tag: cross site scripting
Toxssin – Open-source Penetration Testing Tool That Automates Exploiting Cross-Site Scripting (XSS)
toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious […]
DalFox – Fast, Powerful Parameter Analysis & XSS Scanner, Based on a Golang/DOM Parser
DalFox is a fast, powerful parameter analysis and XSS scanner, based on a golang/DOM parser. supports friendly Pipeline, CI/CD and testing of different types of XSS. I talk about naming. Dal(달) is the Korean pronunciation […]
DalFox – Fast, Powerful Parameter Analysis and XSS Scanner
Key features Mode: url sxss pipe file server Class Key Feature Description Discovery Parameter analysis – Find reflected param– Find alive/bad special chars, event handler and attack code– Identification of injection points(HTML/JS/Attribute)inHTML-none inJS-none inJS-double inJS-single […]
XSSTRON, Electron JS Browser To Find XSS Vulnerabilities
Powerful Chromium Browser to find XSS Vulnerabilities automatically while browsing web, it can detect many case scenarios with support for POST requests too Installation Usage Just browse the web like a normal web browser then […]
MyBB Timeline Plugin 1.0 – Cross-Site Scripting / CSRF
The MyBB Forum plugin Timeline version 1.0 is vulnerable to XSS(Cross site Scripting) and CSRF(Cross Site Request Forgery) attacks.
Oracle Business Intelligence Enterprise Edition 11.1.1.7.140715 – Stored XSS Exploit
Oracle Business Intelligence Enterprise Edition version 11.1.1.7.140715 is vulnerable to a stored cross site scripting exploit.
WordPress Plugin Stripe Payments 2.0.39 – ‘AcceptStripePayments-settings[currency_code]’ Vulnerable to Stored XSS
The WordPress plugin Stripe Payments 2.0.39 suffers from a Stored Cross Site Scripting vulnerability(XSS). Currently their is not an updated version.
WordPress Plugin WP-Paginate 2.1.3 – ‘preset’ Vulnerable to Stored XSS
The WordPress plugin WP-Paginate 2.1.3 suffers from a Stored Cross Site Scripting vulnerability(XSS). Currently their is not an updated version.
WordPress Core 5.2.2 Suffers – ‘post previews’ XSS Cross Site Scripting Vulnerability
Currently WordPress Core Version 5.2.2 suffers from cross site scripting vulnerability located within “post previews”. Flaw is fixed by upgrading to WordPress version
