Extending XSS to upload Shell in a Website By Pentester708

[22]

thank you buddy

[67]

thanks for this one

[1.323]

Thanks man for this

Our Shop:https://shoppy.gg/@a7medxd
#1 Cheapest And High-Quality Kyc Full Access Accounts I Prices Starts From 15$
https://t.me/IConic_Store1
Telegram:@a7medxd1
Discord:a7medxd.

[66]

xd man

[92]

XSS is much like SQL Injection , it is Javascript Injection(Pretty much straight eh for the newbies)

Now instead of uploading some Phishing , CSRF payloads . I Injected an uploader.php in here.
The site was not having any upload feature previously but after i injected the payload, Anyone can upload anything(exe,php,bat,what not) to it, which will be stored and executed on the Server Level.

I wonder what would you guys have uploaded ?

Well I did the harder part for yal. Play around uploading your shells

You can get to your uploaded shells by adding its name in the URL after uploading


Site:

Still waiting for a mod to approve of my thread...

[25]

[font]thxxxxxxxxxx[/font]

---

thxxxxxxxxxxdxxxxxxxxxxxxxxxxxxxxxxxx

[65]

thanks

[6]

ty for sharing