Blind XSS tips 1. There was No sign-up page. Only sign_in. 2. Changed sign_in to sign_up 3. sign_up page appeared 4. Put bxss payload. 5. Payload executed in the admin panel of the same domain. 6. Got cookie 7. Used cookie to login to admin panel. #bugbounty #bugbountytip
7
39
264
199
12B
Which service/tool do you use for bxss? Or host your own?
2
0
0
0
580
United States Trendler
- 1. Eagles 121K posts
- 2. Jalen 26.1K posts
- 3. Ben Johnson 15.9K posts
- 4. Caleb 46.1K posts
- 5. Philly 25.2K posts
- 6. AJ Brown 5,298 posts
- 7. #BearDown 2,255 posts
- 8. Patullo 11.7K posts
- 9. Sirianni 6,987 posts
- 10. Black Friday 514K posts
- 11. Lane 54K posts
- 12. Georgia Tech 4,624 posts
- 13. #GoDawgs 4,993 posts
- 14. Swift 56.2K posts
- 15. NFC East 1,786 posts
- 16. Saquon 7,780 posts
- 17. #CHIvsPHI 2,456 posts
- 18. Gunner 5,265 posts
- 19. Monangai 6,402 posts
- 20. Howie 2,403 posts
Loading...
Something went wrong.
Something went wrong.