################################# # Exploit Title: Chat Room CSRF # Google Dork :چت روم # Test On:Win/Ubuntu # Discovered By: Sarbaz_Vatan ################################# # [ + ] USAGE: +++++++++++++++++++++++++++++++++ # 1.- SELECT A WEBSITE FROM THE DORK ABOVE # 2.- First log into chat rooms then register # 3.- Go to private chat with someone # 4.- send this code in your chat: # <script>alert("XSS")</script> # 5.- Now you can see the 'XSS' ################################# # Special Thanks : Agh4 $aeeid :)