0

Could someone explain how to use the exploit I found, if I have found one? I may have potentially found an xss exploit on my church's website and want to notify the church website admin if I really have found an exploit.

When I use the command:
python3 xsstrike.py -u "myexample.com/index.php/component/search/?searchword=d3v" --path

I am notified by xsstrike that they have found 1 reflection and begin displaying payloads that they believe are exploits.

Checking for DOM vulnerabilities 
 WAF detected: Amazon Web Services Web Application Firewall (Amazon) 
 Testing parameter: searchword 
 Reflections found: 1 
 Analysing reflections 
 Generating payloads 
 Payloads generated: 1536 
------------------------------------------------------------
 Payload: <detaILs%0dOnpointerenter%09=%09confirm()%0dx%2F%2F 
 Efficiency: 92 
 Confidence: 10 
------------------------------------------------------------
 Payload: <A%0dONpOiNtEreNTeR%0d=%0d(prompt)``%0dx%2F%2Fv3dm0s 
 Efficiency: 92 
 Confidence: 10 
------------------------------------------------------------
 Payload: <A%09ONpoINTeRenter+=+(confirm)()%0dx%2F%2Fv3dm0s 
 Efficiency: 92 
 Confidence: 10 
------------------------------------------------------------
 Payload: <a%0dOnpoInTEREntEr%0a=%0aa=prompt,a()%2F%2Fv3dm0s 
 Efficiency: 92 
 Confidence: 10 

However when I try to use any payload exploit that is generated nothing seems to happen. The examples I saw in class displayed an alert box which basically meant we could inject javascript. When I type in the website with the payload replacing the d3v portion. So the url would look like: myexample.com/index.php/component/search/?searchword=payload"
The results of the first payload just state "detaILsOnpointeren" in the search bar of the church website. Has the church filtered this vulnerability? The church has a minimum 3 character and maximum 20 characters for each search.

In addition, if there is an exploit what would the best way to prevent any future vulnerabilities? Unfortunately my knowledge is limited to a only 1 network security class I took in college and the proposed solutions are here. CSE 127 Winter 2019 Lec 13 Notes

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.