+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Persistant XSS Exploitation (/Thread-Persistant-XSS-Exploitation)
Persistant XSS Exploitation - Eclipse - 02-17-2015
I have a question.
Say there's a site, example.com. At example.com/shit/lel.php, there's a persistent XSS vulnerability. Is there a way that you could insert some code so that example.com/index.php is edited?
I figure it's a stretch, but I'm just making sure.
Eclipse
RE: Persistant XSS Exploitation - dotcppfile - 02-17-2015
obviously, that's what XSS is about, injecting HTML, CSS or Java Script, and it's dangerous because you can inject Java Script, so try to do something about that.
RE: Persistant XSS Exploitation - Eclipse - 02-17-2015
(02-17-2015, 10:26 PM)dotcppfile Wrote: obviously, that's what XSS is about, injecting HTML, CSS or Java Script, and it's dangerous because you can inject Java Script, so try to do something about that.
I don't think you understood the question. I know what XSS allows you to do, but I'm asking if it's possible to edit a page that's not directly vulnerable.
example.com/shit/shit.php is vulnerable and editable. Can something be added here so that example.com/index.php is edited? (../../index.php)
RE: Persistant XSS Exploitation - Dyme - 02-17-2015
Nope. Not universally, at least.
RE: Persistant XSS Exploitation - Eclipse - 02-17-2015
(02-17-2015, 10:32 PM)Dyme Wrote: Nope. Not universally, at least.
Alright, that's all I needed to know.
#closed