🚨XSS Found🚨
1⃣ katana -u "url" -d 5 -ps -pss waybackarchive,commoncrawl,alienvault -kf -jc -fx -ef woff,css,png,svg,jpg,woff2,jpeg,gif,svg thx man @coffinxp7 🥂
2⃣ nuclei -t /string/dast/ -dast -headless
3⃣ Confirm payloads!
🚨 Exploit confirmed! 🚨
Using Nuclei, I identified the CVE-2018-8033 vulnerability in an XML-RPC endpoint. To validate the finding, I reproduced the attack in Burp Suite and confirmed the flaw by accessing the /etc/passwd file.
#CyberSecurity #Pentest
SQL injection
Critical vulnerability in the Country State City Dropdown plugin.$WordPress.$
#BugBounty
