An Accidental XSS on uu.nl

Hello guys, I hope you enjoyed my previous blog. Today I am talking about how I got an accidental XSS on uu.nl

Let’s start

1)First I Enumerate subdomain of uu.nl and I selected www.*.uu.nl subdomain for testing. (sorry for not to a disclosed subdomain)

2)I used “waybackurls” and collected all URL’s of the target.

I found an interesting URL:

I checked out where it reflected, I saw it reflects in between title tag, now balanced the tag

Payload:

test</title><script>alert(document.domain)</script>

Successfully reflected XSS done

Hall Of Fame:

I hope you enjoyed my writeup

follow me on

Thanks….!