Hacking desde 0. Hoy, XSS high level

Siguiendo la linea de entradas de Hacking desde 0 y utilizando la máquina DVWA, en esta entrada vamos a ver como realizar un XSS reflejado en nivel alto. Si no estás al tanto de lo que son los ataques XSS, te recomiendo que te pases por aquí y leas algo sobre ello.

Vamos al nivel alto directamente porque creo que ya se ha hablado bastante en este blog sobre los ataques XSS, así que he decidido saltarme los dos niveles anteriores.

Al seleccionar "XSS reflected" nos aparece una caja en la que nos pide que pongamos nuestro nombre. Vamos a ello y vemos el comportamiento de la aplicación.

List of Bug Bounty

Por si alguien está interesado, os dejo la lista.

Company, Vendor or Manufacturer	Bug Bounty & Rewards	Benefits Gifts or Swag	Security Acknowledgments & Hall Of Fame	Public- or Silent Security Program
123 Contact Form			[ X ]	Public Program
99Designs		[ X ]	[ X ]	Public Program
Acquia			[ X ]	Public Program
Active Campaign			[ X ]	Public Program
ActiveProspect			[ X ]	Public Program
ActiVPN			[ X ]	Public Program
Adapcare		[ X ]		Public Program
Adobe			[ X ]	Public Program
AeroFS			[ X ]	Public Program
Aerohive		[ X ]		Public Program
Agora Ciudadana Security			[ X ]	Public Program
Airbnb		[ X ]		Public Program
Alcyon		[ X ]		Public Program
Altervista			[ X ]	Public Program
Amazon Web Services		[ X ]	[ X ]	Public Program
Android Free Apps			[ X ]	Public Program
Appcelerator			[ X ]	Public Program
Apple			[ X ]	Public Program
Apptentive		[ X ]		Public Program
Asana	[ X ]			Public Program
Atlas	[ X ]		[ X ]	Public Program
AT&T Corporation	[ X ]	[ X ]	[ X ]	Public Program
Attack Secure		[ X ]	[ X ]	Public Program
Automattic Security			[ X ]	Public Program
Avast! - 2014 AntiVirus	[ X ]			Public Program
Avira			[ X ]	Public Program
Badoo	[ X ]		[ X ]	Public Program
Barracuda Networks	[ X ]		[ X ]	Public Program
Base			[ X ]	Public Program
Basecamp			[ X ]	Public Program
Beanstalk			[ X ]	Public Program
BeSnappy			[ X ]	Public Program
Bitcasa			[ X ]	Public Program
Bitcoin.DE		[ X ]	[ X ]	Public Program
Bittrex	[ X ]		[ X ]	Public Program
BitWall			[ X ]	Public Program
Blackberry			[ X ]	Public Program
Blackboard		[ X ]	[ X ]	Public Program
BlinkSale			[ X ]	Public Program
Blogger	[ X ]		[ X ]	Public Program
Box			[ X ]	Public Program
Braintree			[ X ]	Public Program
BudgetSimple	[ X ]			Public Program
Buffer			[ X ]	Public Program
C2FO			[ X ]	Public Program
Campaign Monitor		[ X ]		Public Program
Can you XSS this?			[ X ]	Public Program
Card			[ X ]	Public Program
Chain API			[ X ]	Public Program
Chargify			[ X ]	Public Program
Chromium Project	[ X ]		[ X ]	Public Program
CircleCi		[ X ]		Public Program
Cisco			[ X ]	Public Program
Code Climate			[ X ]	Public Program
Coinbase	[ X ]		[ X ]	Public Program
Coindrawer	[ X ]		[ X ]	Public Program
Coinkite	[ X ]		[ X ]	Public Program
Colupon			[ X ]	Public Program
Commonsware		[ X ]		Public Program
Compilr			[ X ]	Public Program
Constant Contact			[ X ]	Public Program
Counterparty	[ X ]			Public Program
Coupa			[ X ]	Public Program
CPanel	[ X ]			Public Program
cPaperless			[ X ]	Public Program
Cryptocat			[ X ]	Public Program
Cupcake			[ X ]	Public Program
Customer Insight				Public Program
Debian Security Tracker			[ X ]	Public Program
Dell Secureworks	[ X ]		[ X ]	Public Program
Detectify			[ X ]	Public Program
Deutsche Telekom	[ X ]		[ X ]	Public Program
Digital Ocean			[ X ]	Public Program
DNSimple			[ X ]	Public Program
Downstream Analytics		[ X ]		Public Program
Dribbble			[ X ]	Public Program
Dropbox			[ X ]	Public Program
Dropcam			[ X ]	Public Program
Dropmyemail		[ X ]	[ X ]	Public Program
Drupal			[ X ]	Public Program
eBay			[ X ]	Public Program
Eclipse		[ X ]		Public Program
eFront eLearning CMS			[ X ]	Public Program
EMC2			[ X ]	Public Program
Emptrust			[ X ]	Public Program
Engineyard			[ X ]	Public Program
EthnoHub		[ X ]		Public Program
Etsy	[ X ]			Public Program
Eventbrite			[ X ]	Public Program
Event Espresso			[ X ]	Public Program
Evernote			[ X ]	Public Program
Expatistan		[ X ]	[ X ]	Public Program
Facebook WhiteHat	[ X ]		[ X ]	Public Program
FFmpeg				Public Program
Flowdock				Public Program
Fluxiom			[ X ]	Public Program
Fog Creek			[ X ]	Public Program
Form Assembly			[ X ]	Public Program
Foursquare			[ X ]	Public Program
Foxycart			[ X ]	Public Program
Freelancer		[ X ]	[ X ]	Public Program
Gallery	[ X ]			Public Program
Gamma				Public Program
Gemeente Wageningen				Public Program
Gemfury				Public Program
Ghost				Public Program
Ghostscript	[ X ]			Public Program
Giftcards.com			[ X ]	Public Program
Github	[ X ]		[ X ]	Public Program
Gitlab			[ X ]	Public Program
Gittip			[ X ]	Public Program
Gliph			[ X ]	Public Program
GoAnimate			[ X ]	Public Program
Google	[ X ]		[ X ]	Public Program
Grok Learning			[ X ]	Public Program
Hack For Cause			[ X ]	Public Program
HakSecurity			[ X ]	Public Program
Harmony			[ X ]	Public Program
Helpscout	[ X ]		[ X ]	Public Program
Heroku	[ X ]	[ X ]	[ X ]	Public Program
Hex-Rays	[ X ]			Public Program
HoneyDocs			[ X ]	Public Program
Honeywell			[ X ]	Public Program
Hootsuite			[ X ]	Public Program
HTC			[ X ]	Public Program
Huawei		[ X ]	[ X ]	Public Program
Hybrid Saas	[ X ]			Public Program
IBM			[ X ]	Public Program
ICEcoder		[ X ]		Public Program
Iconfinder			[ X ]	Public Program
ifixit			[ X ]	Public Program
Informatiebeveiliging		[ X ]	[ X ]	Public Program
ING NL		[ X ]	[ X ]	Public Program
Instagram	[ X ]	[ X ]	[ X ]	Public Program
IntegraXor (SCADA)		[ X ]	[ X ]	Public Program
Internetwache			[ X ]	Public Program
ITRP			[ X ]	Public Program
Joomla			[ X ]	Public Program
jruby	[ X ]		[ X ]	Public Program
Juniper			[ X ]	Public Program
Kadince				Public Program
Kaneva			[ X ]	Public Program
Kayako			[ X ]	Public Program
Keming Labs			[ X ]	Public Program
Keepass			[ X ]	Public Program
KPN			[ X ]	Public Program
Kraken	[ X ]		[ X ]	Public Program
lastpass		[ X ]	[ X ]	Public Program
LaunchKey	[ X ]		[ X ]	Public Program
Librato			[ X ]	Public Program
Lievensberg Hospital			[ X ]	Public Program
Liferay			[ X ]	Public Program
LinkedIn		[ X ]	[ X ]	Public Program
Logentries			[ X ]	Public Program
Localize			[ X ]	Public Program
Lookout			[ X ]	Public Program
MacOSX Bitcoin LevelDB	[ X ]			Public Program
Magento (Ebay Inc)	[ X ]		[ X ]	Public Program
Magix AG			[ X ]	Public Program
Mahara			[ X ]	Public Program
MailChimp			[ X ]	Public Program
ManageWP			[ X ]	Public Program
Mandrill App			[ X ]	Public Program
Marktplaats	[ X ]			Public Program
Medium			[ X ]	Public Program
Mega.co.nz	[ X ]			Public Program
Meldium			[ X ]	Public Program
Meraki	[ X ]			Public Program
Meta Calculator	[ X ]			Public Program
Microsoft Bug Bounty	[ X ]			Public Program
Microsoft (MSRC)			[ X ]	Public Program
Millsap Independent School			[ X ]	Public Program
Modus CSR		[ X ]		Public Program
Moneybird			[ X ]	Public Program
Moodle			[ X ]	Public Program
Motorola		[ X ]	[ X ]	Public Program
Mozilla	[ X ]	[ X ]	[ X ]	Public Program
Myntra			[ X ]	Public Program
MyStuff2 App		[ X ]	[ X ]	Public Program
Namazu			[ X ]	Public Program
NCSC Netherlands	[ X ]	[ X ]		Public Program
Netagio	[ X ]			Public Program
Netflix			[ X ]	Public Program
Net Worth Pro	[ X ]		[ X ]	Public Program
Nitrous.IO			[ X ]	Public Program
Nokia Siemens Networks		[ X ]	[ X ]	Public Program
Norada			[ X ]	Public Program
Nokia Solutions Networks		[ X ]	[ X ]	Public Program
Nvidia		[ X ]		Public Program
NZRS			[ X ]	Public Program
Offensive Security	[ X ]	[ X ]		Public Program
Offers.com		[ X ]		Public Program
Olark	[ X ]	[ X ]	[ X ]	Public Program
Onavo	[ X ]		[ X ]	Public Program
OpenBSD		[ X ]	[ X ]	Public Program
Openclass Knowledge Base			[ X ]	Public Program
OpenText			[ X ]	Public Program
Opera		[ X ]	[ X ]	Public Program
Oracle			[ X ]	Public Program
Orkut	[ X ]		[ X ]	Public Program
PacketStorm Security	[ X ]	[ X ]		Public Program
PagerDuty			[ X ]	Public Program
Parallels GmbH	[ X ]		[ X ]	Silent Program
Panzura			[ X ]	Public Program
Parley	[ X ]		[ X ]	Public Program
Parse (Facebook)	[ X ]		[ X ]	Public Program
Paychoice			[ X ]	Public Program
Paymill	[ X ]		[ X ]	Public Program
Paypal Inc	[ X ]	[ X ]	[ X ]	Public Program
Pidgin	[ X ]			Public Program
PikaPay			[ X ]	Public Program
Pinoy Hack News		[ X ]	[ X ]	Public Program
Pinterest	[ X ]			Public Program
Piwik			[ X ]	Public Program
Plone Framework			[ X ]	Public Program
Pocket	[ X ]			Public Program
Polar SSL			[ X ]	Public Program
PostmarkApp	[ X ]			Public Program
Prezi	[ X ]			Public Program
PullReview			[ X ]	Public Program
Puppet Labs	[ X ]			Public Program
Qiwi	[ X ]			Public Program
Qmail			[ X ]	Public Program
Rackspace			[ X ]	Public Program
Reddit			[ X ]	Public Program
RedHat	[ X ]			Public Program
Regiobank NL				Public Program
Relaso			[ X ]	Public Program
Ribose	[ X ]			Public Program
Ripple			[ X ]	Public Program
Riskalyze		[ X ]		Public Program
Risk.io	[ X ]			Public Program
Salesforce		[ X ]	[ X ]	Public Program
Samba	[ X ]		[ X ]	Public Program
Samsung	[ X ]		[ X ]	Public Program
SBWire		[ X ]	[ X ]	Public Program
Schuberg Philis			[ X ]	Public Program
Scorpion Software			[ X ]	Public Program
Security Net			[ X ]	Public Program
Segment.io			[ X ]	Public Program
Sellfy	[ X ]		[ X ]	Public Program
Shopify	[ X ]		[ X ]	Public Program
Simple			[ X ]	Public Program
Simplify			[ X ]	Public Program
SiteGround			[ X ]	Public Program
Skoodat			[ X ]	Public Program
Skuid			[ X ]	Public Program
Smart Budget	[ X ]			Public Program
Smileznhapiez			[ X ]	Public Program
SNS Bank NL			[ X ]	Public Program
Sonatype			[ X ]	Public Program
SonicWall (DELL)			[ X ]	Public Program
Sony		[ X ]	[ X ]	Public Program
Soundcloud		[ X ]	[ X ]	Public Program
SplashID			[ X ]	Public Program
Splitwise			[ X ]	Public Program
Splunk		[ X ]		Public Program
Spotify			[ X ]	Public Program
Sprout Social			[ X ]	Public Program
Square		[ X ]	[ X ]	Public Program
StatusPage			[ X ]	Public Program
StreemFire			[ X ]	Public Program
Symantec	[ X ]			Public Program
Tarsnap		[ X ]	[ X ]	Public Program
Team Unify			[ X ]	Public Program
Tele2	[ X ]			Public Program
Telegram			[ X ]	Public Program
Tesla		[ X ]	[ X ]	Public Program
Titus Shop		[ X ]		Silent Program
Trade Only	[ X ]			Public Program
Trend Micro & (Beta Portal)			[ X ]	Public Program
Tresorit			[ X ]	Public Program
Tuenti	[ X ]		[ X ]	Public Program
Tumblr			[ X ]	Public Program
Twilio			[ X ]	Public Program
Twitter		[ X ]	[ X ]	Public Program
Typo3			[ X ]	Public Program
Uber			[ X ]	Public Program
UPC			[ X ]	Public Program
VCE			[ X ]	Public Program
Viadeo			[ X ]	Public Program
Vodafone (Netherlands)		[ X ]	[ X ]	Public Program
Volcanic Pixels			[ X ]	Public Program
Vulnerability Laboratory		[ X ]	[ X ]	Silent Program
VSR			[ X ]	Public Program
Wamba		[ X ]	[ X ]	Public Program
Webconverger	[ X ]			Public Program
Wickr	[ X ]	[ X ]	[ X ]	Public Program
Windthorst ISD				Public Program
X.com		[ X ]	[ X ]	Public Program
Xen			[ X ]	Public Program
Xmarks	[ X ]			Public Program
XMind	[ X ]		[ X ]	Public Program
Yahoo!	[ X ]		[ X ]	Public Program
Yandex			[ X ]	Public Program
Yesware	[ X ]		[ X ]	Public Program
YouTube			[ X ]	Public Program
Zencash		[ X ]	[ X ]	Public Program
Zendesk	[ X ]			Public Program
Zerobrane			[ X ]	Public Program
Zetetic		[ X ]		Public Program
Ziggo			[ X ]	Public Program
Zimbra		[ X ]	[ X ]	Public Program
Zynga			[ X ]	Public Program

Podeis verlo en la web original, fuente: http://www.vulnerability-lab.com/list-of-bug-bounty-programs.php

Roberto García (@1GbDeInfo)