+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: XSS shell upload (/Thread-XSS-shell-upload)
XSS shell upload - vTasker - 09-01-2011
How can i upload a shell / deface a site / get the database via XSS ?
please help me :bow:
thanks
RE: XSS shell upload - FrostByte_mybb_import5923 - 09-01-2011
the thing with XSS it's not like SQLi, where as in sqli you use poor coding to call information from the database xss your injecting malious code. The easiest way for you to deface with XSS you would need your vuln link or area and add a script that steals the login cookie, you then send this to the admin and use a cookie editor to log you in as admin. You then do the business from there.