Blind XSS tips 1. There was No sign-up page. Only sign_in. 2. Changed sign_in to sign_up 3. sign_up page appeared 4. Put bxss payload. 5. Payload executed in the admin panel of the same domain. 6. Got cookie 7. Used cookie to login to admin panel. #bugbounty #bugbountytip
If there is a login page and no registration page. Try to change login to register. You may find a registration page if you are lucky. login => register or registration signin => signup sign_in => sign_up
Where you injected specifically? Or in all input fields on that form?
United States الاتجاهات
- 1. Ravens 57.2K posts
- 2. Lamar 45.7K posts
- 3. Bengals 51.2K posts
- 4. #heatedrivalry 11.2K posts
- 5. ilya 14.3K posts
- 6. shane 16.9K posts
- 7. Joe Burrow 20.5K posts
- 8. Zay Flowers 4,108 posts
- 9. Cowboys 92.7K posts
- 10. Chiefs 108K posts
- 11. Hudson 11.1K posts
- 12. #WhoDey 3,689 posts
- 13. Derrick Henry 4,421 posts
- 14. #hrspoilers 1,525 posts
- 15. connor storrie 1,769 posts
- 16. Sarah Beckstrom 212K posts
- 17. Harbaugh 3,116 posts
- 18. Zac Taylor 2,611 posts
- 19. AFC North 2,302 posts
- 20. Perine 1,582 posts
Loading...
Something went wrong.
Something went wrong.