hacking: security in practice
How I use owasp zap spider or active scan to look for parameters that is reflected with random string that leave to reflect xss?

I attack testphp.vulnweb.com with spider and active scan. It show alot of parameters. artist=1 (http://testphp.vulnweb.com/artists.php?artist=1), cat=1(http://testphp.vulnweb.com/listproducts.php?cat=1), name=ZAP&text=&submit=add+message(POST:guestbook.php()(name,submit,text), etc. But I don't understand how it scan for parameters that leave to xss attack. Does it have a fuzz option (Beside fuzz from attack). I want spider or active scan to start fuzzing for parameters in testphp.vulnweb.com with my random string (random parameters).

submitted by /u/BlackAndroid18
[link] [comments]

Bug-Bounty Getting started & some tips
https://neroli.medium.com/bug-bounty-getting-started-some-tips-600866c4d790?source=rss------bug_bounty-5

Collection of resources and some tips for Bug bounty By (@boomneroli)Continue reading on Medium » (https://neroli.medium.com/bug-bounty-getting-started-some-tips-600866c4d790?source=rss------bug_bounty-5)

HydraSwap Bug Bounty Program Winners Announcement
https://hydraswap.medium.com/hydraswap-bug-bounty-program-winners-announcement-96ac33a45eb5?source=rss------bug_bounty-5

Dear HydraSwap Community,Continue reading on Medium » (https://hydraswap.medium.com/hydraswap-bug-bounty-program-winners-announcement-96ac33a45eb5?source=rss------bug_bounty-5)

Hacking on Medium
Customized Insurance Solution by InsureDao

Insurance is part of every aspects of our life, be it life insurance, health insurance, vehicle or other such insurance. This basically…

Continue reading on Medium »

Nuclei — The best tool for automating Vulnerability testing.

Hello everyone,Continue reading on Techiepedia »
Read more...

Nuclei — The best tool for automating Vulnerability testing.
https://medium.com/techiepedia/nuclei-the-best-tool-for-automating-vulnerability-testing-4bf2a9ba5189?source=rss------bug_bounty-5

Hello everyone,Continue reading on Techiepedia » (https://medium.com/techiepedia/nuclei-the-best-tool-for-automating-vulnerability-testing-4bf2a9ba5189?source=rss------bug_bounty-5)

AWS Security for Noobs
https://medium.com/bug-bounty-hunting/aws-security-for-noobs-97f9759ec23a?source=rss------bug_bounty-5

This post covers the very basics of how Amazon web services work and will cover a little bit about AWS security also. I have created some…Continue reading on Bug Bounty Hunting » (https://medium.com/bug-bounty-hunting/aws-security-for-noobs-97f9759ec23a?source=rss------bug_bounty-5)

AWS Security for Noobs

This post covers the very basics of how Amazon web services work and will cover a little bit about AWS security also. I have created some…Continue reading on Bug Bounty Hunting »
Read more...

Install anew on Kali Linux

Instructions to Install anew on Kali Linux.Continue reading on Medium »
Read more...

Install Chromium on Kali Linux

Chromium — Web BrowserContinue reading on Medium »
Read more...

Install Aquatone on Kali Linux

Aquatone — is a tool for visual inspection of websitesContinue reading on Medium »
Read more...