Les nouveautés et Tutoriels de Votre Codeur | SEO | Création de site web | Création de logiciel

Seo Master present to you:

 how to find xss cross site scripting vulnerability in website xss scripting

Today we will discuss how to find Cross site scripting XSS in common website. As I am security Researcher I have found many Cross site scripting XSS Vulnerabilities in website. So cross site scripting XSS is find not a difficult task but if you are newbie so May you have face some problems to Find  xss scripting in starting . 
But if you read my previous article that what is cross site scripting XSS and its types then you just have idea about how to find Cross site scripting XSS. and I have also share a tutorial how to find vulnerable website so now then you have to able to find cross site scripting . So let’s start  
First of all you have to find the input filed like search bar, Login page, subscribe by email and Contact us page. If you find input then we can inject over payload in the input field.

The question is that what is Payload or vector?

Payload or vector is a JavaScript code which we can insert in input field to find XSS scriptin.

So here I have taken a one example of vulnerable website

I have searched my news on website and I am searching a news for nomanramzan but as you seen in below picture no news found on nomanramzan and after that you just right click on the anywhere of website and click on View page source 
 xss scripting xss


Then press CTRL + F for search nomanramzan and Note the location where the input is placed. as you seen in below picture website taken an input and search value for nomanramzan . so now the important step is that we have put out nomanramzan from “ ”
xss cross site scripting bug

Now I am going to check whether the server sanitize the input or not .  If I am giving the input this <> in input field . Sometime server sanitized the code and then code look like this &lt;&gt;.

So now in this condition website server not sanitize our input and this indicate that the website is vulnerable to XSS Now finally I have put a Payload 

 "><img src=x onerror=prompt(1);>

In the search bar then you have seen below picture. Now it will display pop-up box. So finally we have successfully find a cross site scripting XSS 
 cross site scripting vulnerability

Then again right click on website and then press CTRL + F for search for the payload "><img src=x onerror=prompt(1);> or value and finally you have checked that over payload put out from “” .
how to find xss cross site scripting vulnerability in website

Finally we have find a cross site scripting XSS vulnerability . Hopefully you enjoyed this tutorial. If you have any problem so you can comment below
2013, By: Seo Master
Seo Master present to you:
Android is a few years old now and like the mobile OS, the apps also have evolved and have become more advanced. But there’s always a lot of chatter about which are the top Android apps of all time. This is a very personal and opinion-based choice. Yet, we have compiled a list of the top Android apps based on their popularity, application, and number of downloads.

Mint

Banking, more appropriately, wallet management apps are dime a dozen but one feature that we find lacking in most of these apps is very important and that is budgeting. The basis of a money management app is budgeting and if your app cannot do it, it is as good as useless. Mint has a host of features where you can program the total amount of money coming in and also categorize the money you spend efficiently. The features are extremely well designed and so organized that if you want to spend some money, you can take a look at the app and decide instantly whether you can afford that item or not.

Evernote

Note-taking apps are very popular across all mobile platforms. But Evernote is something of a gold standard in the world of note-taking apps. There are features that can help you with tagging and attaching each and every article with notes and tags. The bottom line is that content management is a breeze with Evernote. A free account allows you up to 60MB of uploads a month and a pro account will give you a staggering 1GB of uploads on an annual basis, although it costs $45.

Polaris Office v4.0

Office suite on your smartphone or tablet is a must-have, especially in today’s world where the mobile device is imperative to the business scheme of things. This office suite that costs you around $13 on iTunes store is free for Android. There are all the tools you expect in an Office suite, like a word processor, PowerPoint, and spreadsheet features as well. There is one drawback though. The app works only on a few devices. So, if your device supports Polaris Office v4.0, make sure you install it.

RedPhone

Want to make phone calls that are safe from tapping and interception? Use RedPhone. Although this app is still in its beta version, you can make encrypted calls to the other RedPhone app users. The call quality and other associated features are pretty decent, especially considering that this app is available free of cost. It still needs a little tweaking and this is why it is available in its beta version.

Slacker Radio

With a number of human-curated stations that can be accessed through the Internet, Slacker Radio allows you to stream music belonging to a wide range of categories. The most attractive feature of this app is that it allows niche streaming. You can stream music or audio belonging to a specific niche. You can also stream sports, talk shows, news, and other stuff using Slacker Radio.

Grace is an enthusiastic blogger and an expert associated with blynk.it which is specialized in developing Hospitality Apps for iPad and Android.
2013, By: Seo Master
Seo Master present to you:

How To Choose Your Next PC

Choosing a new computer can be very difficult, especially as the market becomes increasingly saturated with more and more technological companies, all striving to offer you the best deal. However, you need to be wary when buying a new computer because often what seems to be the best deal may in fact not be as good as you think.

There are a number of important things you need to consider before making your purchase, the most important of which are listed below.

1.) Work out the true worth of your ‘bargain’
People are always proud when they get something for a cheaper price than normal, however, with computers; it is not just the initial purchase price you need to consider. Often, the cheaper computers are blank canvasses and you have to spend the extra money, you initially saved, on essential software and hardware anyway.

Don’t be lulled into the false security that low prices can create. Always check exactly what you are getting for your money and then see how this tallies up in comparison to the more expensive models. You may even find it’s worth paying more now, rather than spending the next few weeks working out what you don’t have and buying it anyway.

2.) Don’t be duped by the sales team

Always remember the job of a salesperson is to, essentially, sell you things you don’t need in addition to those things you do need. There will probably be a higher mark up on these add-ons than the actual computer so your salesperson will be doing all they can to encourage you to make the extra purchases.

This is why we are always inundated with special offers and the one-upmanship attitude that manufacturers and suppliers constantly exhibit. Therefore try not to be easily impressed when a salesperson is throwing impressive sounding numbers and technical phrases at you.

The best thing you can do is to have the phrase ‘So what?’ at the forefront of your mind. What do all these figures and words mean to you? How do they help you? You need to make sure all the benefits of the computer are fully clarified, not just its specifications. Then you will be able to make a truly informed decision.

3.) What do YOU need?

Really think about what you need your new computer for, for instance, who will be using it, how much will it be used and will it need to be portable? The majority of computers available on the market will allow you to do pretty much anything these days; however, if you only need a new computer for word processing, browsing the internet and playing games, then you’re probably best off with a low-end machine that won’t cost the earth.

However, if you require more from your machine, you will need to ensure it has all the software, hardware and memory you require. Even though all these things can be added on at a later date, it is better to start out with as much as possible and more often than not, you will also be able to secure a better discount when buying all at once.

4.) Support & maintenance

It is really important to make sure you discuss IT support and maintenance before ever buying a computer. You will always get a warranty but the length of these varies and you should also check what is covered so you know what to expect should something go wrong. There will always be the option for an extended warranty too but many people are not keen to pay the upfront price of these.

You also need to know what the response times are like for support. For instance, if you are self-employed and need your computer for work and something goes wrong, can they have you back up and running in 24 hours, or is it going to take them 24 hours to get back to you. The best option is to buy a computer where you can buy a good service contact and have access to a 24 hour in-person support centre, stocked with people who know what they are talking about!

5.) Research

As with most commercial goods, it is really important to do your research into the brand and the computer itself before making your purchase. For instance, in addition to finding out more information from computer retailer sites, there are also numerous online forums where you will find a huge number of computer geeks taking great pride in slating or recommending the latest computers and brands.

Feel free to post any questions you have in the forums as you’re much more likely to get an honest response in forums than you are in the computer shop. Ultimately, always have your requirements at the forefront of your mind, as well as a top-end budget. This should keep you on track and ensure you choose the most suitable computer.




Author Bio:
James writes for Quintech Computer Support. When not writing about pc services, he can often be found helping friends and family who beg for his technical skills.
2013, By: Seo Master
Powered by Blogger.