Reputation
732
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
8 22
Impact
~34k people reached

Apr
25
comment Dom xss posibility question?
Thanks you , now I can implement it in code. And thanks for links , I tried Dominator but got nothing, but tools make mistake so I asked.
Apr
25
accepted Dom xss posibility question?
Apr
25
asked Dom xss posibility question?
Apr
12
accepted What are good tools for CRLF discovery?
Apr
12
accepted What are correct steps to setup this exploit execution(jboss_invoke_deploy)?
Apr
11
revised What are good tools for CRLF discovery?
Added some text.
Apr
11
comment What are good tools for CRLF discovery?
this acunetix.com/websitesecurity/crlf-injection
Apr
11
asked What are good tools for CRLF discovery?
Mar
3
asked What are correct steps to setup this exploit execution(jboss_invoke_deploy)?
Mar
2
comment Is it possible to exploit XSS inside User-Agent header?
Thanks , seems like there is no way , now . I've downloaded the tool and downgraded my flash player , just to test it.It works great.Thanks
Mar
2
accepted Is it possible to exploit XSS inside User-Agent header?
Mar
2
comment Is it possible to exploit XSS inside User-Agent header?
There is a cross site scripting on mobile version of that site , it is showing my user-agent inside source code.So when I use temper data I can change user-agent to "><script>alert(0)</script> and crate javscript alert. But how to request for that page with spoofed user-agent without need to use temper data?
Mar
2
asked Is it possible to exploit XSS inside User-Agent header?
Feb
27
accepted How can XML Injection be exploited , need example?
Feb
26
asked How can XML Injection be exploited , need example?
Feb
2
comment Finding all AJAX entrypoints
Ali fix link for crawljax.com :) Also : youtube.com/watch?v=rYAO94GnBlY
Jan
30
accepted How can I find websites owned by a particular company?
Jan
29
asked How can I find websites owned by a particular company?
Jan
1
comment How can this xss challenge be solved?
Thanks the jquery one gave me a real headache , but three of 5 for a beginner is not bad, and btw nice challenge.
Dec
31
accepted How I add cookie to w3af for authenticated attacks?