Reputation
449
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 6 20
Newest
 Tumbleweed
Impact
~31k people reached

  • 0 posts edited
  • 0 helpful flags
  • 76 votes cast
Aug
24
awarded  Tumbleweed
Aug
24
comment How to launch XSS code from an INPUT HTML tag upon page load?
Didn't work for me. Nor would I expect it to. onload isn't valid for input type="text" per w3schools.com/jsref/event_onload.asp
Aug
22
comment How to launch XSS code from an INPUT HTML tag upon page load?
@Anyonous - well them let me create a PoC website that demo's the vulnerability. Done. Now... how do I exploit it? And I do believe I have demonstrated an understanding of the concepts. As I said in my OP I can break out of the attribute but not the tag. Or do you believe that familiarity with the autofocus attribute essential to understanding XSS?
Aug
22
accepted How to launch XSS code from an INPUT HTML tag upon page load?
Aug
22
comment How to launch XSS code from an INPUT HTML tag upon page load?
@Anonymous - ignorance? I didn't write the website that I'm trying to exploit!
Aug
22
comment How to launch XSS code from an INPUT HTML tag upon page load?
I can't break out of the <input tag to start a <script tag, let alone not close a <script tag I'm already in. I'm not aware of any others that'll help either but if you are aware of one do feel free to post it as the answer..
Aug
22
asked How to launch XSS code from an INPUT HTML tag upon page load?
Aug
22
asked breaking down RSA/ECB/OAEPWITHSHA-256ANDMGF1PADDING
Aug
22
comment how to validate PKCS7 signed message signed with a self-signed cert via OpenSSL CLI
It's not working meh. My P7M file: pastebin.com/8382eEsN(base64 decode it to get actual result) The signing cert: pastebin.com/D4rPmyM9 I still get the "self signed certificate" error.
Aug
21
asked importing CA certs into OpenSSL CLI
Aug
21
asked how to validate PKCS7 signed message signed with a self-signed cert via OpenSSL CLI
Aug
21
asked openssl cms not finding signer certificate
Aug
18
awarded  Yearling
Aug
18
asked Why is the digest algorithm specified in two places in CMS / PKCS7?
Aug
17
asked Enhanced Security Services / CAdES for PKCS7 - multiple signers for SignerInfo's?
Aug
15
asked How do I get the subject public key from a PKCS7 message?
Aug
5
accepted extendedCertificate's in PKCS7 / CMS
Aug
5
asked extendedCertificate's in PKCS7 / CMS
Jul
25
awarded  Constituent
Jul
16
comment do serial numbers for x509 certs need to be sequential or can they be timestamp's?
That kinda makes me wonder what the integer length should be. Normally integers are 32-bits but in the case of X.509 / ASN.1 the sky is the limit. Heck - you have the integer type used for RSA keys with 2048-bit "integers".