• Blind XSS-> Type of stored XSS. (Payload gets stored on a web page)
• Where do you find them? - In places you cannot access.
> An admin panel
> A log history restricted to admins
> A feedback form that goes straight to the admin
> A chat bot message to the support team
• Where do you find them? - In places you cannot access.
> An admin panel
> A log history restricted to admins
> A feedback form that goes straight to the admin
> A chat bot message to the support team
• Where do you put the payloads?
> In headers (eg: in Referer and User-Agent headers while filling forms)
> Put the payload in your username and self-report yourself ;)
• But how will you know if the payload actually fires?
> XSShunter!
> In headers (eg: in Referer and User-Agent headers while filling forms)
> Put the payload in your username and self-report yourself ;)
• But how will you know if the payload actually fires?
> XSShunter!
You can use XSS Hunter service for testing website for blind-XSS vulnerabilities
🔗 xsshunter.com
#bugbounty #bugbountytips #infosec
🔗 xsshunter.com
#bugbounty #bugbountytips #infosec
Follow @NandanLohitaksh for more informative stuffs! :)
• • •
Missing some Tweet in this thread? You can try to
force a refresh
