Login Register




⚠️ Domain Changed /🎂 Happy 14th Birthday Sinisterly!
Proxyvizr - The Proxy Marketplace (Residential / Mobile / Datacenter / ISP). 10+ Providers, Instant Auto-delivery, Pay with Crypto.
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


XSS shell upload filter_list
Author
Message
vTasker Offline
Banned
Fourteen Years of Service
Posts: 30
Threads: 4
Currency: 0 SP
XSS shell upload 09-01-2011, 11:04 AM #1
How can i upload a shell / deface a site / get the database via XSS ?

please help me :bow:

thanks

Reply

FrostByte_mybb_import5923 Offline
Perl Programmer
 ***
Registered (Bronze)
Fourteen Years of Service
Posts: 249
Threads: 76
Reputation: 0
Currency: 0 SP
RE: XSS shell upload 09-01-2011, 11:11 AM #2
the thing with XSS it's not like SQLi, where as in sqli you use poor coding to call information from the database xss your injecting malious code. The easiest way for you to deface with XSS you would need your vuln link or area and add a script that steals the login cookie, you then send this to the admin and use a cookie editor to log you in as admin. You then do the business from there.

[Image: 6caf54.gif]

Website
Reply