awesome video.. can you explain other ways to find DOM based XSS without burp suite Professional ? maybe the free version
@TheXSSrat
4 жыл бұрын
Hey brother 😊 hope you are well! Thank you for the suggestion! I will for sure. You can do manual code review for the sinks
@TheXSSrat
4 жыл бұрын
Oh k forgot to say I will make a video for sure 😊
@0xRashid
4 жыл бұрын
@@TheXSSrat thanks bro... excited for it..
@jw1ck
3 жыл бұрын
Bro keep up the good content. If you start posting regularly (every other day if possible) I'm sure your channel will continue to blow up. Keep the amazing content coming! This kind of stuff takes so much time to learn if you're forced to patch together different information across the internet, but here you provide context and explain everything very well. Thanks dude!
@user-zl9dy6hz2q
3 жыл бұрын
Awesome please keep uploading
@alibabapour7418
2 жыл бұрын
Despite all , you're a good person bro I can feel this
@6060fishy
4 жыл бұрын
Thanks - time to practice practice practice!
@TheXSSrat
4 жыл бұрын
🔥🔥 DOM XSS is often missed because it’s hard to interpret the results from burp as you can see. The POC doesn’t always straight up work 😊
@romagranito
3 жыл бұрын
Thank for this awesome video sir.😍😍😚
@TheJonesin666
3 жыл бұрын
Hello. Great video!! I'm new to Burp and can I please ask why I don't have a Dynamic Analysis tab? I'm using BS professional. Thanks!
@TheXSSrat
3 жыл бұрын
Sorry bro, I have no clue 😅 can you post some screenshots in the discord please?
@TheJonesin666
3 жыл бұрын
@@TheXSSrat Will do and thanks! Erm, what's a/the discord?
@ankitapawar4970
2 жыл бұрын
Which type of parameters we have to look for dom based xss? It's any input parameter on web page?
@TheXSSrat
2 жыл бұрын
It's called DOM sinks and it's in the source code, not the parameters :)
@mohamedfatheem2872
4 жыл бұрын
Thank you for the amazing video brother
@TheXSSrat
4 жыл бұрын
Hey brother 😊 thanks for watching! There are many more XSS videos to come
@mohamedfatheem2872
4 жыл бұрын
@@TheXSSrat Looking forward
@chidanandkallibaddi1955
Жыл бұрын
Nice video but I am using burpsuite professional version but I don't have that Dynamic analysis tab
@TheXSSrat
Жыл бұрын
That is because it got renamed in the latest versions of burp suite towards live scan :)
@muhamadrafli7831
4 жыл бұрын
Hey i found open redirect and wanted to linked it to dom xss but i dont know how to access or found the script that contain the parameter since the aplication doesnt reflect anything to to the html of the web any tips?? By the way please help ive been try it for a week and not found a single bug
@TheXSSrat
4 жыл бұрын
Sorry bro, I haven’t got a clue about open redirects but maybe you can ask in the discord 😊 it’s in the description
@arfitutorials3708
2 жыл бұрын
Hello!! how can i get dynami analysis tab please help me
@TheXSSrat
2 жыл бұрын
Google xd
@rishi7245
4 жыл бұрын
Just increase u r volume its so low that i can barely hear😊😊
@TheXSSrat
4 жыл бұрын
Thank you brother 😊 I will increase the volume next video
@sail3sh703
4 жыл бұрын
can you post a video explaining and solving portswigger xss labs they are hard
@TheXSSrat
4 жыл бұрын
For sure bro 😊 thank you so much for the suggestion
@D3X73RR
3 жыл бұрын
hi guys burp scaner give me her dom xss Data is read from window.location.hash and passed to jQuery() via the following statements: var target = window.location.hash; var $target = jQuery(target); can i get some help
@ditapeskova4
2 жыл бұрын
How could this be exploited by the attacker to create an attack out of this?
@munevverseher4028
3 жыл бұрын
which version of burp that you use man? also the technique is so good
@TheXSSrat
3 жыл бұрын
2021.4 :D
@graycybermonk3068
3 жыл бұрын
Hi, How are your. I need some question. Can we use in bug bounty for xss some scanner like XSpear or xss scanner? I am waiting for your reply. Thanks in advance.
@TheXSSrat
3 жыл бұрын
Register and copy the payload xsshunter.com/, paste that where you want to test xss
@graycybermonk3068
3 жыл бұрын
@@TheXSSrat Thanks for quick answer. Is xsshunter only for. Blind xss or all kind of xss can handle? please I will wait for your answer.
@TheXSSrat
3 жыл бұрын
It can handle all kinds of XSS and you will know if you can steal the cookies
@graycybermonk3068
3 жыл бұрын
@@TheXSSrat You are my Man. Thanks for this information. Respect and love.
@TheXSSrat
3 жыл бұрын
Remember to be proud of yourself amazing hacker
@trendtraderjohnson8578
4 жыл бұрын
Hi Sir, Is there any tools were we can pull the url's to find XSS vulnerability
@TheXSSrat
4 жыл бұрын
Shiva THE Explorer hey brother 😊 yes there is a way and it is really hard to find online :o is it okay if I make a video explaining that? I think many would benefit from it greatly
@TheXSSrat
4 жыл бұрын
You can export all URLs in burp suite site map after you put on a filter to only show requests with params
@trendtraderjohnson8578
4 жыл бұрын
@@TheXSSrat Yes Sir, That would be great
@onions5113
4 жыл бұрын
does this automated can detect DOM 100%?
@TheXSSrat
4 жыл бұрын
Nothing can :) 100% bug detection is a fallacy I’m afraid 😱
Пікірлер: 46