• XSS.stack #1 – первый литературный журнал от юзеров форума

Javascript Injection / XSS (How to add custom code to hosted page)

muli666

RAID-массив
Пользователь
Регистрация
16.08.2022
Сообщения
66
Реакции
0
Гарант сделки
7
Hi guys,

can someone help me with the following issue:
I have a hosted page with a Javascript-Files and someone added an own Javascript-File (in Assets/) and renamed inside of a HTML file the Javascrpt-File (from path SRC/ -> Assets) to run his own code.
Can someone please help me how this Is possible and explain what steps were performed?

Access via FTP or access to the hoster is impossible!

Maybe it was performed with Javascript Injection, adding Jquery and use AJAX call to inject that?
Would be amazing if someone can help here:

Feel free to contact me on telegram: @gg22gg77


Before:

<html lang="en">
<head>
<script src="src/settings.js"></script>
</head>
<body>

</body>
</html>



After:

<html lang="en">
<head>
<script src="assets/settings.js"></script>
</head>
<body>

</body>
</html>
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх