Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

DOM Based XSS

digital | Last updated: Apr 29, 2020 04:12PM UTC

Hi Team, I Have Found the DOM Based XSS using Brupsuite but I am how can exploit the vulnerability. This is what I got, The application may be vulnerable to DOM-based cross-site scripting. Data is read from window.location.href and passed to the 'prepend()' function of JQuery via the following statements: var t=new Date(e.originalEvent.timeStamp).toLocaleTimeString(),a=window.location.href.replace(window.location.origin,""); o.prepend(" <li> <ti..." + t+ " </time> ..." + a+ "'>" + a+ "</a> - <s..." + history.length+ " </span> ..." ) _______________________________________ {var t=new Date(e.originalEvent.timeStamp).toLocaleTimeString(),a=window.location.href.replace(window.location.origin,"");o.prepend(" <li> <time> "+t+" </time> <p> <span class='type'> popstate </span> <a href='"+a+"'>"+a+"</a> - <span class='type'> history.length: </span> <span> "+history.length+" </span> </p> </li> "),s(i),i=!1}

Liam, PortSwigger Agent | Last updated: Apr 30, 2020 06:41AM UTC