[9월 30일] Beebox: A3

XSS - Reflected (GET)

 

 

 

 

---

XSS - Reflected (POST)

 

 

 

---

XSS - Reflected (JSON)

 

 

---

XSS - Reflected (AJAX/JSON)

burp-suite 사용

 

---

XSS - Reflected (AJAX/XML)

 

---

XSS - Reflected (Back Button)

---

XSS - Reflected (Custom Header)

 

 

 

 

 

---

XSS - Reflected (Eval)

 

 

 

 

 

 

 

---

XSS - Reflected (HREF)

 

(HREF : Hypertext REFerence)

 

 

 

 

<script>alert('test')</script> 입력 결과

 

 

</script><script>alert('test')</script>

 

 

Vote에 마우스를 올리니까 alert 작동

 

 

---

XSS - Reflected (Login Form)

 

 

 

sql 인젝션 공격을 하면서 script 공격

 

---

phpMyAdmin BBCode Tag XSS

 

 

 

 

 

---

XSS - Reflected (PHP_SELF)

 

 

 

 

 

---

XSS - Reflected (Referer)

 

 

 

 

---

XSS - Reflected (user-Agent)

 

 

 

 

 

 

---

XSS - Stored (Blog)

 

 

 

 

---

XSS - Stored (Cookies)

 

 

---

SQLiteManager XSS

 

 

---

XSS - Stored (user-Agent)

 

 

 

 

저장된 것을 확인