Skip to content

Instantly share code, notes, and snippets.

@ihebski

ihebski/Reflected xss

Last active August 18, 2020 00:23
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ihebski/43d56361bec6a2076d26ddffbfbf579d to your computer and use it in GitHub Desktop.
Save ihebski/43d56361bec6a2076d26ddffbfbf579d to your computer and use it in GitHub Desktop.
Download ZIP
catch reflected xss -> check if FUZZ is reflected
Raw
Reflected xss
echo subdomains | grep '=' | qsreplace FUZZ\" -a | while read url;do target=$(curl -s -l $url | egrep -o '(FUZZ"|FUZZ\\")'); echo -e "Target:\e[1;33m $url\e[0m" "$target" "\n-------"; done | sed 's/FUZZ"/[Xss Possible] Reflection Found/g'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment