XSS Code

I figured out where a website that works with a point system is vunerable to cross site scripting.
I am not a great hacker so if someone can tell me what i would need to type in to change the point value.
Thank you.

Chances are you won't be able to change your points with xss. Also, the payload is highly dependent on where the xss is located. I'm not sure if you found it in a submit form, chat box, or header. Anyways, xss is done at the client side, so you would only be changing local data.

A guy already did this but people weren't sure how he did it,Im just looking to try

Without any context this is impossible.

what do you mean

Explain the context of the xss. Its impossible to tell you what to put into your xss when you didn't provide detail beyond a reference to a point system.
Check out this page on OWASP

I found that it will accept the code in a player search box inside a poker mini game that you play to get points that you later withdraw to the main website points.
Sorry if i dont provide enough information im a bit of a noob.

So the whole idea behind xss is that it allows you to execute javascript on the user side. This happens because the programmer forgot to make sure that the search box only takes text and not special characters.

You need to look and see how points are added and then then replicate that process with your own javascript script. You pretty much have to do this part on your own; if you can't then you should start with something easier. Then use the xss vulnerability to deploy your script.

thanks man

XSS Code

Post a Reply

Similar Threads

Tags for this Thread