XSS Bypassing WAF POC || liveramp.com

Рет қаралды 1,591

A9x

Күн бұрын

#bugbounty #hacker #ethicalhacking #ethicalhacker

Пікірлер: 19

@jeremied7945 Ай бұрын

I got a question here: what if you choose to not report all the payloads ? Like just one payload by report? Would you be able to claim the p1 bounty for each ?

@mohithreddy1439 2 ай бұрын

Hi bro telugu na meeru great work bro meeru reply isthey personal ga ping chestha

@Couple-Rounds 3 ай бұрын

how much bounty? You do it like lostsec-coffin😊

@A9x-AkhilReddy 3 ай бұрын

@@Couple-Rounds I know him bro .twitter hot topic on infosec . I don't disclose bounty amount bro.

@archuser532 3 ай бұрын

@@A9x-AkhilReddy why not please share the bounty amount as i am also beginner to this

@hackerhacker-t4w 2 ай бұрын

i need payload bro

@A9x-AkhilReddy 2 ай бұрын

@@hackerhacker-t4w drop you social media handle .I will send to you

@NethaxStark 2 ай бұрын

Now these payloads are not working!

@zedvn3792 2 ай бұрын

Why do you know where to add the character "?"(cloud/?) come in and include the payload?

@A9x-AkhilReddy 2 ай бұрын

@@zedvn3792 it just a part of testing bro .even If I don't the target at first . I just randomly check everything . The most important thing is if you open any domain in your browser go through the entire source code .you can get some most interesting url ,URI , endpoints , parameters, in that source code. That time I saw this I just added the "> but nothing happened . But it reflects the exact same value inside it . Then I add these symbols for further testing how things are really working . Then I just add ;, ?so it happened .Then it comes out of the tag .then I inject simple html payloads it worked .while I was testing for xss .the waf blocked me .so I have some payloads list that saves from all over the internet .I sent it to the intruder .and checked the response of 218 payloads .then I got the xss . I hope I clarify it for you .

@zedvn3792 2 ай бұрын

@@A9x-AkhilReddy nice bro