mirror of
https://github.com/xalgord/My-Methodologies.git
synced 2024-11-10 06:04:20 +00:00
GITBOOK-76: change request with no subject merged in GitBook
This commit is contained in:
parent
2a7bf0e9e6
commit
dcea489766
1 changed files with 17 additions and 1 deletions
18
README.md
18
README.md
|
@ -2,7 +2,7 @@
|
||||||
description: 'description: For Personal Reference'
|
description: 'description: For Personal Reference'
|
||||||
---
|
---
|
||||||
|
|
||||||
# My Methodologies
|
# 🧑🏫 My Methodologies
|
||||||
|
|
||||||
* https://github.com/maurosoria/dirsearch
|
* https://github.com/maurosoria/dirsearch
|
||||||
* https://github.com/MobSF/Mobile-Security-Framework-MobSF
|
* https://github.com/MobSF/Mobile-Security-Framework-MobSF
|
||||||
|
@ -375,6 +375,22 @@ GET /?q=xss POST /q=xss
|
||||||
<iMg src%3dN onerror%3dalert(0x000D98)>
|
<iMg src%3dN onerror%3dalert(0x000D98)>
|
||||||
```
|
```
|
||||||
|
|
||||||
|
### Throw this into EVERY parameter you see
|
||||||
|
|
||||||
|
```
|
||||||
|
'"`><img src=x>${{7*7}}
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
'"` =====> SQLi testing
|
||||||
|
'"` ======> JS inject
|
||||||
|
'"`> ======> html tag attribute inject
|
||||||
|
<img src=x> =====> html inject
|
||||||
|
${{7*7}} ======> CSTI
|
||||||
|
```
|
||||||
|
|
||||||
|
by @theXSSrat
|
||||||
|
|
||||||
#### Nuclei CVE-2023-24488 Citrix XSS - Easy Bug Bounty
|
#### Nuclei CVE-2023-24488 Citrix XSS - Easy Bug Bounty
|
||||||
|
|
||||||
**Command**:\
|
**Command**:\
|
||||||
|
|
Loading…
Reference in a new issue