Reflected XSS. Steps :First open the website in any browser like chrome or Firefox.Navigate to the search bar where we search subdomain and inject the payload.Payload I:\u002D\u0022\u003Cimg src\u003Dx onerror\u003Dalert(\u0022xss\u0022)\u003E\u0022.In similar way users cookies can also be stolen using this payload Payload II:\u002D\u0022\u003Cimg src\u003Dx onerror\u003Dalert(document.cookie)\u003E\u0022

http://www.subdomainfinder.c99.nl

Screenshots

• 

Comments (0)

To comment, please sign in.

Event ID: 1146

Anon1337

Total Points = 264

BCH

qr5yccf7j4dpjekyz3vpawgaarl352n7yv5d5mtzzc

No Address, will go to BLT Donation

Reported on http://subdomainfinder.c99.nl

Issues Reported: 1

Browser Version: 84.0.4147

Operating System Linux

Added On

Aug. 29, 2020, 3:04 a.m.

Bug Type

Functional

Submitted

Independently

OS Version:

Unknown