Using DOM-based XSS : Need Helpto redirect to different domain or execute script?

Improve grammar issues introduced in previous edits.

Source Link

edited Apr 8, 2016 at 4:08

Matt Nordhoff

3.5k
1
23
16

I was trying my hands at "DOM" based "XSS"DOM-based XSS. I came across a scenario where a user controlled-controlled string from the URL is included in JavaScript as below.

var userControlled=substring of URL;
window.location="/abc/xyz?param="+userControlled;

The URL is something like--- http://mydomain/param1=qwerty Where, where I can enter any value for "param1"param1 and the system would not complain.

Note: Value of param1param1 does not directly appear anywhere in the response, but it is used by DOM.

Or itthe URL can be http://mydomain/param1=qwerty#sadsdsdsd.

I was just wondering, is there a way to redirect user to a different domain or execute a script or anything which can help me execute a successful XSS attack,? Or any other attack for that matter.

I was trying my hands at "DOM" based "XSS". I came across a scenario where user controlled string from the URL is included in JavaScript as below.

var userControlled=substring of URL;
window.location="/abc/xyz?param="+userControlled;

The URL is something like--- http://mydomain/param1=qwerty Where I can enter any value for "param1" and the system would not complain.

Note: Value of param1 does not directly appear anywhere in the response, but it is used by DOM.

Or it can be http://mydomain/param1=qwerty#sadsdsdsd

I was just wondering, is there a way to redirect user to a different domain or execute a script or anything which can help me execute a successful XSS attack, Or any other attack for that matter.

I was trying my hands at DOM-based XSS. I came across a scenario where a user-controlled string from the URL is included in JavaScript as below.

var userControlled=substring of URL;
window.location="/abc/xyz?param="+userControlled;

The URL is something like http://mydomain/param1=qwerty, where I can enter any value for param1 and the system would not complain.

Note: Value of param1 does not directly appear anywhere in the response, but it is used by DOM.

Or the URL can be http://mydomain/param1=qwerty#sadsdsdsd.

I was just wondering, is there a way to redirect user to a different domain or execute a script or anything which can help me execute a successful XSS attack? Or any other attack for that matter.

misuse of grammar incorrectly starting sentences with or

Source Link

edit approved Apr 8, 2016 at 3:29

nate35795

41
9

I was trying my hands at DOM"DOM" based XSS"XSS". I came across a scenario where user controlled string from the URL is included in javascriptJavaScript as below.

var userControlled=substring of URL;
window.location="/abc/xyz?param="+userControlled;

The URL is something like--- http://mydomain/param1=qwerty where Where I can enter any value for param1"param1" and systemthe system would not complain.

Note: Value of param1 does not directly appear anywhere in the response, but it is used using by DOM.

orOr it can be http://mydomain/param1=qwerty#sadsdsdsd

I was just wondering, is there a way to redirect user to a different domain or execute a script or anything which can help me execute a successful XSS attack., Or any other attack for that matter.

I was trying my hands at DOM based XSS. I came across a scenario where user controlled string from the URL is included in javascript as below

var userControlled=substring of URL;
window.location="/abc/xyz?param="+userControlled;

URL is something like http://mydomain/param1=qwerty where I can enter any value for param1 and system would not complain

Note: Value of param1 does not directly appear anywhere in the response but it is used using DOM

or can be http://mydomain/param1=qwerty#sadsdsdsd

I was just wondering is there a way to redirect user to a different domain or execute a script or anything which can help me execute a successful XSS attack. Or any other attack for that matter.

I was trying my hands at "DOM" based "XSS". I came across a scenario where user controlled string from the URL is included in JavaScript as below.

var userControlled=substring of URL;
window.location="/abc/xyz?param="+userControlled;

The URL is something like--- http://mydomain/param1=qwerty Where I can enter any value for "param1" and the system would not complain.

Note: Value of param1 does not directly appear anywhere in the response, but it is used by DOM.

Or it can be http://mydomain/param1=qwerty#sadsdsdsd

I was just wondering, is there a way to redirect user to a different domain or execute a script or anything which can help me execute a successful XSS attack, Or any other attack for that matter.