Extending XSS to upload Shell in a Website By Pentester708

[20]

XSS shell upload ???

[40]

thnxxxxxxxxxxxxx

[18]

XSS is much like SQL Injection , it is Javascript Injection(Pretty much straight eh for the newbies)

Now instead of uploading some Phishing , CSRF payloads . I Injected an uploader.php in here.
The site was not having any upload feature previously but after i injected the payload, Anyone can upload anything(exe,php,bat,what not) to it, which will be stored and executed on the Server Level.

I wonder what would you guys have uploaded ?

Well I did the harder part for yal. Play around uploading your shells

You can get to your uploaded shells by adding its name in the URL after uploading


Site:

Can you share the payload in question? i have tons of xss vulnerable websites, it would be a game change if i can shell them

Are you still sending emails?

It's time to send bulk SMS for only third the price of the biggest providers

Set your own send name, any quantity, and also delivery receipt is available

Contact me

[7]

Unlocking

[89]

oh damn nice

[9]

juste pour voir. Merci

[14]

lol thanks

[101]

hmmmmmm...