Skip to content

fix(xss): use waitdialog in dom-xss #11921

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
Apr 10, 2025
Merged

fix(xss): use waitdialog in dom-xss #11921

merged 2 commits into from
Apr 10, 2025

Conversation

dwisiswant0
Copy link
Member

Template / PR Information

  • Fixed dom-xss.yaml

Template Validation

I've validated this template locally?

  • YES
  • NO

Proof:

HTML:

<html>
<head>
    <title>Nuclei Test Page</title>
</head>
<body>
<script type="text/javascript">
const urlParams = new URLSearchParams(window.location.search);
const nameContent = urlParams.get('name');
if (nameContent) document.write(nameContent);
</script>
</body>
</html>

Usage:

nuclei -t ./dast/vulnerabilities/xss/dom-xss.yaml -dast -headless -u "http://127.0.0.1:8080/?name=John"

Additional Details (leave it blank if not applicable)

Additional References:

@github-actions github-actions bot requested a review from pussycat0x April 10, 2025 10:57
@DhiyaneshGeek DhiyaneshGeek added the Done Ready to merge label Apr 10, 2025
@DhiyaneshGeek DhiyaneshGeek merged commit 6bf59fc into main Apr 10, 2025
3 checks passed
@DhiyaneshGeek DhiyaneshGeek deleted the dwisiswant0/fix/xss/use-waitdialog-in-dom-xss branch April 10, 2025 11:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@DhiyaneshGeek DhiyaneshGeek DhiyaneshGeek approved these changes

@pussycat0x pussycat0x Awaiting requested review from pussycat0x

Assignees

@dwisiswant0 dwisiswant0

Labels
Done Ready to merge
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@dwisiswant0 @DhiyaneshGeek