Christopher Ashby ashbyca

Keybase proof

I hereby claim:

I am ashbyca on github.
I am ashby (https://keybase.io/ashby) on keybase.
I have a public key whose fingerprint is B966 BDF6 C4FE DDCF BE6B 6F93 AD9B DB92 3F8C 42BD

To claim this, I am signing this object:

Stored XSS

Description A Stored Cross-Site Scripting (XSS) vulnerability occurs when a web application sends stored strings that were provided by an attacker to a victim's browser in such a way that the browser executes part of the string as code. The string contains malicious data and is initially stored server-side, often in the application's database.

Steps To Reproduce:

Log in to the application.
Navigate to the necessary URL found from Automated tool
Navigate to the section identified as vulnerable
Enter any of the below mentioned payloads in the "various form/other input fields and also fill in any mandatory fields.

Resources

In no particular order, below are various resources used in studying/reviewing..

	#!/bin/sh
	#
	# 00-header - create the header of the MOTD
	# Copyright (c) 2013 Nick Charlton
	# Copyright (c) 2009-2010 Canonical Ltd.
	#
	# Authors: Nick Charlton <[email protected]>
	# Dustin Kirkland <[email protected]>
	#
	# This program is free software; you can redistribute it and/or modify

	#!/bin/bash
	#
	# 10-sysinfo - generate the system information
	# Copyright (c) 2013 Nick Charlton
	#
	# Authors: Nick Charlton <[email protected]>
	#
	# This program is free software; you can redistribute it and/or modify
	# it under the terms of the GNU General Public License as published by
	# the Free Software Foundation; either version 2 of the License, or

	#!/bin/sh
	#
	# 99-footer - write the admin's footer to the MOTD
	# Copyright (c) 2013 Nick Charlton
	# Copyright (c) 2009-2010 Canonical Ltd.
	#
	# Authors: Nick Charlton <[email protected]>
	# Dustin Kirkland <[email protected]>
	#
	# This program is free software; you can redistribute it and/or modify

 <?xml version="1.0" encoding="UTF-8"?>
 <contextMenu>
         <menuEntry name="Domain Crawler Query" url="http://www.domaincrawler.com/ip/view/%IP%" />
         <menuEntry name="DomainTools Query" url="https://whois.domaintools.com/%IP%" />
         <menuEntry name="Exposure Lookup" url="http://exposure.iseclab.org/detection/ip?ip=%IP%" />
         <menuEntry name="Fortiguard Threat Research" url="http://www.fortiguard.com/ip_rep/index.php?data=%IP%&amp;lookup=Lookup" />
         <menuEntry name="Google SafeBrowsing Report" url="http://www.google.com/safebrowsing/diagnostic?site=%IP%" />
         <menuEntry name="HoneyNet Project Lookup" url="http://www.projecthoneypot.org/ip_%IP%" />
         <menuEntry name="IPVoid Query" url="http://www.ipvoid.com/scan/%IP%" />
         <menuEntry name="IsitAPT" url="http://isitapt.com/%IP%" />

	System Setup

	# Install Python PIP and Dependencies
	sudo apt-get install python3-dev python3-pip python3-setuptools libyaml-dev wget libreadline7 libreadline-dev git python-dnspython python-mechanize python-slowaes python-xlsxwriter python-jsonrpclib python-lxml lsb-release figlet update-motd libncurses5-dev libgdbm-dev libnss3-dev libssl-dev libreadline-dev libffi-dev -y

	# Setup and configure Dynamic MOTD
	# Remove the current directory
	sudo rm -r /etc/update-motd.d/

	# Create new directory

	# Edit this file to introduce tasks to be run by cron.
	#
	# Each task to run has to be defined through a single line
	# indicating with different fields when the task will be run
	# and what command to run for the task
	#
	# To define the time you can provide concrete values for
	# minute (m), hour (h), day of month (dom), month (mon),
	# and day of week (dow) or use '*' in these fields (for 'any').#
	# Notice that tasks will be started based on the cron's system