Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

Why JS Injection isn\'t workin\'?


ghostraider100's Avatar
Member
0 0

I\'ve tried a JS sample test in a Website to find a Vuln in a Comment, Like this

But the site shows the script directly as given but not the alert box, why is that so?


dami3n's Avatar
Member
0 0

Might be down to the browser or a server command/block. I have noticed that firefox doesn\'t support java-script commands in the URL and chrome also is a bit funny about them alot of people are doing them via bookmarklets instead. Also check if you javascript is fully enabled. No script etc.


Beat_Slayer's Avatar
Member
0 0

Well if you use Firefox, there is this browser.urlbar.filter.javascript on about:config that you can set to false, to allow javascript on the url bar.