cross site scripting Archives — Page 2 of 2

Go CGI / FastCGI Transport Cross Site Scripting

September 3, 2020September 3, 2020 Admin

The CGI and FastCGI implementations in the Go standard library behave differently from the HTTP server implementation when serving content. In contrast to the documented behavior, they may return non-HTML data as HTML. This may […]

XSpear is XSS Scanner on ruby gems

August 21, 2020September 29, 2020 Admin

Key features Pattern matching based XSS scanning Detect alert confirm prompt event on headless browser (with Selenium) Testing request/response for XSS protection bypass and reflected(or all) params Reflected Params All params(for blind xss, anytings) Filtered […]

XSSer Automated Detection, Exploitation, and Reporting Framework for XSS Vulnerabilities

July 27, 2020September 29, 2020 Admin

Cross Site “Scripter” (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. It provides several options to try to bypass certain filters and various special techniques for code […]

MyBB 1.8.17 – Cross-Site Scripting

September 13, 2018 Admin

# Exploit Title: MyBB 1.8.17 – Cross-Site Scripting # Date: 2018-08-11 # Author: 0xB9 # Twitter: @0xB9Sec # Contact: 0xB9[at]pm.me # Software Link: https://mybb.com/download/ # Version: 1.8.17 # Tested on: Ubuntu 18.04 # CVE: CVE-2018-15596 […]

WordPress Plugin Job Manager v4.1.0 Stored Cross Site

July 18, 2018July 18, 2018 Admin

# Exploit Title: WordPress Plugin Job Manager v4.1.0 Stored Cross Site Scripting # Google Dork: N/A # Date: 2018-07-15 # Exploit Author: Berk Dusunur & Selimcan Ozdemir # Vendor Homepage: https://wpjobmanager.com # Software Link: https://downloads.wordpress.org/plugin/wp-job-manager.latest-stable.zip […]