Skip to content

Commit

Permalink
Updated README with notable hacks
Browse files Browse the repository at this point in the history
  • Loading branch information
Matthew Bryant committed Jul 19, 2016
1 parent bd999c0 commit 0c0576c
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,5 +37,9 @@ Please see https://thehackerblog.com/xss-hunter-is-now-open-source-heres-how-to-
* **Secondary Payload Loading**: Got a secondary payload that you want to load after XSS Hunter has done it's thing? XSS Hunter offers you the option to specify a secondary JavaScript payload to run after it's completed it's collection.
* **iOS Web Application**: It is also possible to view your XSS payload fires via an iOS web app. Simple navigate to the `/app` path and save the page as a web application to your iPhone's desktop.

# Notable Exploits
* Blind XSS in Spotify's Salesforce integration: https://mhmdiaa.github.io/jekyll/update/2016/07/19/blind-xss-in-spotify.html
* Blind XSS in GoDaddy's support panel: https://thehackerblog.com/poisoning-the-well-compromising-godaddy-customer-support-with-blind-xss/

# Want to Contribute?
All code was created by me and (for that reason) is likely *not* best pracice and *definitely* in need of optimization/cleanup. Any pull requests are appreciated!

0 comments on commit 0c0576c

Please sign in to comment.