Skip to content

Instantly share code, notes, and snippets.

@prinsharma1999
Last active December 27, 2021 13:08
Show Gist options
  • Save prinsharma1999/e76cfe2eb7214065ac3a2f192e9b82cf to your computer and use it in GitHub Desktop.
Save prinsharma1999/e76cfe2eb7214065ac3a2f192e9b82cf to your computer and use it in GitHub Desktop.
# # DESCRIPTION HTML injection is a technique used to take advantage of non-validated input to modify a web page presented by a web application to its users. Attackers take advantage of the fact that the content of a web page is often related to a
# # WRITE-UPS
https://www.softwaretestinghelp.com/html-injection-tutorial/
HTML injection (with XSS possible) on the https://www.data.gov/issue/ using media_url attribute https://hackerone.com/reports/263226
Html Injection and Possible XSS in sms-be-vip.twitter.com https://hackerone.com/reports/150179
“I too like to live dangerously”, Accidentally Finding RCE in Signal Desktop via HTML Injection in Quoted Replies https://thehackerblog.com/i-too-like-to-live-dangerously-accidentally-finding-rce-in-signal-desktop-via-html-injection-in-quoted-replies/index.html
HTML injection to SSRF By Mustafa Khan
https://blog.hx01.me/2018/05/html-injection-to-ssrf.html
Not a fancy bug, just HTML Injection in Clause - clause.io (Write Up)
https://evanricafort.blogspot.com/2019/07/html-injection-in-clause-email.html
HTML Injection to XSS bypass in [REDACTED.com] https://evanricafort.blogspot.com/2019/12/html-injection-to-xss-bypass-in.html
HTML Injection(Unique Exploitation)
https://medium.com/@pratiky054/html-injection-unique-exploitation-a5c3d4e6fed8
Google ADS Stored Xss & Html Injections 5000$
https://www.youtube.com/watch?v=O5BWtwykJJg
BugBounty types — HTML injection via email
https://medium.com/@elberandre/bugbounty-types-html-injection-via-email-8409b6dc4d18
Html Injection and Possible XSS in main nordvpn.com domain
https://hackerone.com/reports/780632
Bug Bounty #2 Self-XSS & Html Injection (ads.google.com) $5000
https://www.youtube.com/watch?v=QP05znoHz-A
HTML-injection in PDF-export leads to LFI https://hackerone.com/reports/809819
Bug Bounty | SMTP Injection + HTML Injection - AT&T https://www.youtube.com/watch?v=aKsKRg2RMzQ
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment