Researcher Project Spotlight - 1N3's InjectX Tutorial

[samhouston]

Today we’re putting the spotlight on @1N3’s new InjectX tutorial. This is a great way to find various injection bugs.

Read more here:

Tutorial: InjectX to Find XSS

Overview In this tutorial, I will cover a simple technique to identify reflected values in a target web application and easily locate Cross-Site Scripting vulnerabilities. By injecting unique heuristic strings, we can quickly check if the value we are testing is reflected and not being sanitized by the application. I have used this technique in the past and it has helped me find various injection bugs that have paid up to $500 in some cases. Requirements In order to use this technique, you’ll…