Thread by @fs0c131y

🧨 Alert 🧨: The website of the @BJP4India, the Indian political party of @narendramodi, has been hacked… again… delhi.bjp.org/kashmir.html

@BJP4India @narendramodi The page called Kashmir.html is loaded from @pastebin pastebin.com/raw/j3peQ0M5

@BJP4India @narendramodi @pastebin Decoded version of the Kashmir.html page

@BJP4India @narendramodi @pastebin I can smell a stored XSS

Stop saying « This is only the Delhi subdomain ». The subdomain and the main domain are on the same server 104.18.130.37. This is bad, face it