Видео Stealing User Information with Famous File Upload Services XSS Vulnerability

[shuja1337]

Github Repo: https://github.com/pakbch/File-Upload-XSS
Demo Video: https://user-images.githubuserconte...1303-408ae221-f883-4e5d-9291-3e4ea9147441.mp4

File-Upload-XSS is a Python script designed by me to take advantage of the SVG XSS vulnerability present in various file upload services.

• megaupload.nz
• anonfiles.com
• bayfiles.org
• filechan.org
• openload.cc
• upvid.cc
• rapidshare.nu
• hotfile.io
• lolabits.se

 

[B60]

What can you exactly do using this exploit? Potential access to database?

 

[shuja1337]

What can you exactly do using this exploit? Potential access to database?

basic XSS Stuff you Can Check the Repo

 

[B60]

wow im impressed, this is very nice, is there any way to make it so they still have a file downloaded

 

[shuja1337]

wow im impressed, this is very nice, is there any way to make it so they still have a file downloaded

there is but i dont know the Payload but you can check online maybe you can find

 

[quaza]

Very well done!
Is there a CVE on this vulnerability? I wonder which more sites are vulnerable

 

[shuja1337]

Very well done!
Is there a CVE on this vulnerability? I wonder which more sites are vulnerable

No Theres Not And i will find more Websites

 

[Th3_Pwn1sh3r]

Noice!

 

[Obi]

Really good work. Do you know any other potential capabilities?

 

[rwxrwx]

Hmm, interesting. The features added to the payload in JavaScript on GitHub are limited but I am sure you can customize the script and add more interesting features.

 

[liszt]

К сожалению уже не работает

 

[keytoobtc]

cool