Making xss Pages 2-8 Vulnerable to XSS_stored and reflected

OSTEsayed · Jul 20, 2023 · 7659ccb · 7659ccb
1 parent a81e3c8
commit 7659ccb
Show file tree

Hide file tree

Showing 8 changed files with 1,611 additions and 2 deletions.
diff --git a/XSS/index.php b/XSS/index.php
@@ -155,11 +155,27 @@
         <button class="button" onclick="location.href='page6.php';">XSS page 6</button>
         <button class="button" onclick="location.href='page7.php';">XSS page 7</button>
         <button class="button" onclick="location.href='page8.php';">XSS page 8</button>
-        <button class="button" onclick="location.href='page9.php';">XSS page 9</button>
-        <button class="button" onclick="location.href='page10.php';">XSS page 10</button>
 
     </div>
 
 
 </body>
 </html>
+<?php 
+try {
+    $servername = "localhost";
+    $username = "root";
+    $password = "";
+
+    // Step 1: Connect to MySQL
+    $conn = new PDO("mysql:host=$servername", $username, $password);
+    $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+    $conn->exec("USE OSTE");
+    $sql = "DELETE FROM comontair";
+    $stmt = $conn->prepare($sql);
+    $stmt->execute();
+} catch (PDOException $e) {
+    echo "Connection failed: " . $e->getMessage();
+}
+
+?>
diff --git a/XSS/page2.php b/XSS/page2.php
@@ -0,0 +1,205 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>OSTE Vulnerable Web Application</title>
+    <style>
+        /* Add your custom CSS styles here */
+        body {
+            font-family: Arial, sans-serif;
+            background-color: #f2f2f2;
+            margin: 0;
+            padding: 0;
+        }
+        header {
+            background-color: #333;
+            padding: 10px;
+            color: #fff;
+            display: flex;
+            align-items: center;
+               justify-content: space-between; /* Align the list to the right */
+
+        }
+        header img {
+            width: 50px;
+            height: 50px;
+            margin-right: 10px;
+        }
+        header ul {
+            list-style: none;
+            margin: 0;
+            padding: 0;
+            display: flex;
+        }
+        header li {
+            margin-left: 20px;
+        }
+        a{
+        color:white;
+        }
+        h1 {
+            font-family: 'Your Custom Font', Arial, sans-serif;
+            text-align: center;
+            margin: 30px 0;
+        }
+        p {
+            text-align: center;
+            margin-bottom: 30px;
+        }
+        .btn-container {
+            display: flex;
+            justify-content: center;
+        }
+        .button {
+            background-color: #007BFF;
+            color: #fff;
+            border: none;
+            padding: 10px 20px;
+            margin: 10px;
+            border-radius: 5px;
+            cursor: pointer;
+            font-size: 16px;
+        }
+        .button:hover {
+            background-color: #0056b3;
+        }
+        p {
+            text-align: center;
+            font-size: 18px;
+            line-height: 1.6;
+            max-width: 800px;
+            margin: 0 auto 30px;
+            padding: 10px;
+            background-color: #f9f9f9;
+            border: 1px solid #ccc;
+            border-radius: 5px;
+            box-shadow: 0 2px 5px rgba(0, 0, 0, 0.1);
+        }
+
+        /* Add some color and emphasis for specific text */
+        p strong {
+            color: #007BFF;
+        }
+
+        /* Add some margin to the button container */
+        .btn-container {
+            display: flex;
+            justify-content: center;
+            margin-top: 20px;
+        }
+                header {
+            background-color: #333;
+            padding: 10px;
+            color: #fff;
+            display: flex;
+            justify-content: space-between; /* Align the list to the right */
+            align-items: center;
+        }
+
+        header img {
+            width: 100px;
+            height: 50px;
+            margin-right: 10px;
+        }
+
+        header ul {
+            list-style: none;
+            margin: 0;
+            padding: 0;
+            display: flex;
+        }
+
+        header li {
+            margin-left: 20px;
+        }
+           .button-container {
+            display: flex;
+            flex-direction: column;
+            align-items: center;
+            margin-top: 20px;
+        }
+        .button {
+          background-color: #007BFF;
+            color: #fff;
+            border: none;
+            padding: 15px 30px;
+            margin: 5px;
+            border-radius: 5px;
+            cursor: pointer;
+            font-size: 16px;
+            width: 350px; /* Set the desired width for the buttons */
+        }
+        .button:hover {
+            background-color: #0056b3;
+        }
+
+        form {
+            background-color: #fff;
+            border-radius: 8px;
+            box-shadow: 0 4px 10px rgba(0, 0, 0, 0.1);
+            padding: 20px;
+            display: flex;
+            flex-direction: column;
+            align-items: center;
+            width: 300px;
+        }
+        label {
+            font-size: 16px;
+            margin-bottom: 10px;
+        }
+        input[type="text"] {
+            padding: 10px;
+            border: 1px solid #ccc;
+            border-radius: 4px;
+            width: 100%;
+            font-size: 16px;
+        }
+        button {
+            background-color: #007BFF;
+            color: #fff;
+            border: none;
+            padding: 10px 20px;
+            margin-top: 20px;
+            border-radius: 4px;
+            cursor: pointer;
+            font-size: 16px;
+            transition: background-color 0.3s;
+        }
+        button:hover {
+            background-color: #0056b3;
+        }
+    </style>
+</head>
+<body>
+    <header>
+        <img src="../OSTE.svg" alt="Logo">
+        <a href="index.php"> <img style="width:25px;height:25px;" src="../ico/undo.png" alt="back"></a>
+
+        <ul>
+   	     <li><a href="../index.php">Home</a></li>
+            <li><a href="database.php">Database</a></li>
+            <li><a href="vulnerabilities.php">Vulnerabilities</a></li>
+        </ul>
+    </header>
+
+    <h1>Greetings, What's your name?</h1>
+    <div class="button-container">
+        <form method="get" action="">
+        <label for="inputField">Enter your name:</label>
+        <input type="text" id="inputField" name="username">
+        <button type="submit">Submit</button>
+    </form>
+    </div>
+<?php
+if(isset($_GET['username'])){
+echo"<h1>Welcome To OSTE Vulnerable web application <3";
+$name = str_replace( '<script>', '', $_GET['username'] );
+echo$name;
+echo"</h1>";
+}
+
+?>
+
+</body>
+</html>