Questions tagged [reflected-xss]

The tag has no usage guidance.

3
votes
0answers
88 views

Is it possible to exploit this cors?

I found an xss on subdomain.example.com and i verified that the domain api.example.com accepts subdomain.example.com as valid origin. Can i exploit this as cors by inserting a CORS script in subdomain....
1
vote
0answers
771 views

How can I steal all cookies from reflected XSS?

I just found a website with a XSS vulnerability. When I visit the following URL, a pop up occurs: https://example.com/article/HALLOWEEN"><script>alert(1);</script> I have a ...
0
votes
0answers
44 views

Finding hidden parameters manually for XSS

I am researching about XSS and Google helped me a lot about learning like how to bypass XSS filters, POST and GET based XSS . I am really curious to know how to find hidden parameters manually for ...
0
votes
0answers
100 views

CSS Injection without colon

I'm looking for a way to create a CSS injection proof-of-concept. I can insert the following and it gets reflected in the browser: <style>body{background-color:red}</style> The only ...
0
votes
0answers
197 views

xsser fails to find easy XSS vulnerability (Web For Pentester)

I tried to evaluate the effectivity of xsser (http://xsser.03c8.net) by letting it run against the "Web For Pentester" XSS tests (https://pentesterlab.com/exercises/web_for_pentester/course) is it ...
-2
votes
0answers
49 views

is it possible bypass xss filter in which double quote changes into symbol “?

the input is reflected but when I try the double quote(") it changed to symbol (“).Is it possible to bypass this filter. for eg;the input is reflected in meta tag like this <meta itemprop="name" ...