Blind XSS tips 1. There was No sign-up page. Only sign_in. 2. Changed sign_in to sign_up 3. sign_up page appeared 4. Put bxss payload. 5. Payload executed in the admin panel of the same domain. 6. Got cookie 7. Used cookie to login to admin panel. #bugbounty #bugbountytip
If there is a login page and no registration page. Try to change login to register. You may find a registration page if you are lucky. login => register or registration signin => signup sign_in => sign_up
Where you injected specifically? Or in all input fields on that form?
United States Tren
- 1. Lakers 49.2K posts
- 2. Dillon Brooks 5,741 posts
- 3. Giants 82.8K posts
- 4. Bron 23.2K posts
- 5. #WWERaw 66.9K posts
- 6. Patriots 124K posts
- 7. Drake Maye 23.3K posts
- 8. Dart 34.8K posts
- 9. Suns 17.5K posts
- 10. Collin Gillespie 1,761 posts
- 11. Diaz 33.9K posts
- 12. Devin Williams 7,483 posts
- 13. Ryan Nembhard 3,483 posts
- 14. Pats 15.6K posts
- 15. Gunther 14.3K posts
- 16. Devin Booker 2,455 posts
- 17. Joe Schoen 3,319 posts
- 18. Younghoe Koo 6,523 posts
- 19. Vando 1,642 posts
- 20. Abdul Carter 10.7K posts
Loading...
Something went wrong.
Something went wrong.