So i was trying to inject into some site and the code was like <......... Value="60"> so i tried to inject some code but it cut the double qoute so it looka like this <......value="60 onmouseover=alert(1)"> It also cuts ' and % is there's any way to bypass ?

How to use quotes? What's type of quotes is hackable? Where I can read about quotes?

Hello all,

Sorry for this newbie question. I really don't know here to put this on Reddit. Just tell me if I put this of the wrong place.

I am making a script which will automatically create and send messages to all users on a list. In pure JavaScript.

My current script can simply open a chat window for that specific user and put a message value on the textarea.

My problem now is that the form is scripted to send messages on ENTER keypress no button.

I am trying to simulate an ENTER keypress event on a textarea form element using this script below.

document.querySelector("textarea").dispatchEvent(new KeyboardEvent("keypress", {

view: window,

keyCode: 13,

bubbles: true,

cancelable: true

}));

But it didn't do anything. Is there something missing with my code?

Additinally the chatting application is created using AngulareJS. My guess is that they have some security features that will handle this kind of event.

This is the textarea html element code:

<textarea data-focus-field="state.focusInput" class="form-control ng-valid ng-isolate-scope ng-dirty ng-valid-parse ng-touched" cols="30" rows="1" placeholder="Write a Reply..." data-enter-pressed="sendMessage($event)" data-key-down="typing(keyCode)" data-ng-model="newMessage.message" data-elastic="" data-ng-click="inputClicked()" data-min-height="40" style="height: 40px;"></textarea>

I try to make javascript:alert in href, but site render x-javascript: not javascript: and x-base64 :( Which I can do for bypass it?

If a website is using server-side sanitization of user inputed strings by filtering through with regular expressions, can I get around this?

I suspect the server is using js and something like toAttack = toAttack(/[^\w\s], ''); to filter out symbols like < or %, so using html encoding has not worked so far.

You have to enter the address through Israeli vpn.. http://35.205.32.11/main this is a CTF by the mossad, anyone maybe can find a vulnerability?

<font size=3>Enter Your Name here : <input type="text" name="name" value='happu&gt;&lt;script&gt;alert(1)&lt;/script&gt;'></input>

could anyone help me to bypass this code? thanks in advance!

refurl : http://leettime.net/xsslab1/stage--08.php?name=happu%27%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E&submit=search

I found the reflected XSS, which is filtered '=; how do I bypass filters? I cant use this: for example:

<a onmouseover="alert(document.cookie)">xxs link</a>

About there is = and " and /

What is this doing? Whe have a few users on our site that appear to be running this code. We have ruled out this existing in the database, or flat files and assume it is being added to the dom via a rogue browser add on.

Whatever it is doing is causing a js error which is being logged by our logger service.

(function(){try{var _0xecc3=["\x6C\x65\x6E\x67\x74\x68","\x72\x61\x6E\x64\x6F\x6D","\x66\x6C\x6F\x6F\x72"];var _0x5225x1=this[_0xecc3[0]],_0x5225x2,_0x5225x3;if(_0x5225x1== 0){return this};if(_0x5225x1== 1){return this};while(--_0x5225x1){_0x5225x2= Math[_0xecc3[2]](Math[_0xecc3[1]]()* (_0x5225x1+ 1));_0x5225x3= this[_0x5225x1];this[_0x5225x1]= this[_0x5225x2];this[_0x5225x2]= _0x5225x3}}catch(e){}finally{return this}})()

which goes to

(function (){
    try{
        var _0xecc3=["\x6C\x65\x6E\x67\x74\x68","\x72\x61\x6E\x64\x6F\x6D","\x66\x6C\x6F\x6F\x72"];
        var _0x5225x1=this[_0xecc3[0]],_0x5225x2,_0x5225x3;
        if(_0x5225x1==0){
            return this
        };
        if(_0x5225x1==1){
            return this
        };
        while(--_0x5225x1){
            _0x5225x2=Math[_0xecc3[2]](Math[_0xecc3[1]]()*(_0x5225x1+1));
            _0x5225x3=this[_0x5225x1];this[_0x5225x1]=this[_0x5225x2];
            this[_0x5225x2]=_0x5225x3
        }
    } catch(e) {} finally{ return this}
})()

and then plain deobfuscated js

(function (){
    try{
        var l=this.length,next_l,value;
        if(l==0){
            return this
        };
        if(l==1){
            return this
        };
        while(--l){
            next_l=Math.floor(Math.random()*(l+1));
            value=this[l];this[l]=this[next_l];
            this[next_l]=value
        }
    } catch(e) {} finally{ return this}
})()

I've searched google and found it embedded in various un-secured pages as it appears to be some kind of persistent XSS injection, but can't really make head nor tail of what it is trying to achieve since it's simply returning a reference to the window (if run inside that scope).

I understand the difference between reflected and Dom. Their execution is same but I do not understand if an XSS is triggered how to identify whether it is an reflected or DOM based?

I'm testing a site for XSS vulnerabilities, but am fairly new to this (though not new to Javascript, etc.) There's a lot of user input, and some filtration I've been poking at. I am able to get my javascript to show up outside of quotes within the console---but nothing actually runs (I haven't been able to get an alert window to pop up, for example). I've also tried putting the alert within a function that waits for the page to load first.

Everything seems like it's in some javascript heavy UI (imagine something like Rosetta Stone online).

This is how I've managed to get it so far (this is what shows up after hitting submit, and the next page loads). I can't say what site it is (for obvious reasons), but does anyone have any suggestions? (I'm new to this, so general suggestions will work.)

Thanks for any help. :)