Posts

Showing posts with the label Security

Self-XSS

Hello and welcome, you might visited to this site, either the URL from DevTools, or just search for "Self XSS". If you're here because of the URL from DevTools, then you might be scammed (or you just came here because you're bored, right?) What the hell is this? Self-XSS is a method to trick you to paste malicious Javascript code in your browser development tool (if you're using Chrome/Chromium then it's called DevTools). These code can steal your account, cookies, and other data that's related to the site that you're in. Sound scary, how does it works? As I've said before, Self-XSS is a method to trick you to paste malicious Javascript code in your browser development tool. Once that script is executed, it will get your account token (the thing that let you use account without logging in multiple times), cookies (another kind of thing, similar to token), and other kind of data. Then it will send to attacker's server those informa...