πHow I hacked NASA and got 8 bugs ?
source: https://medium.com/@shari7a0x/how-i-hacked-nasa-and-get-8-bugs-e5cd397a6af9
Hi hackers ,
I will explain , How did i get 8 bugs in NASA .
Itβs about 7 cross site scripting (xss) and one open redirect .
First step collect subdomains and check live domains .
I always use tool subfinder and add to it some APIβs .
I always use tool HTTPX .
second step collecting parameters .
I always use two tools paramspider and waybackurls .
wait , are you real to collect parameters form domains by yourself ?
itβs many subdomains and paraspider canβt automate this alone .
I use simple bash script ,to automate collect parameters from subdomains .
little not before run this script you should open directory of Paramspider .
what after this ?
You want to check parameters if you can add (tags <>) .or not
I used KXSS , itβs very nice tool but not work at all the time .
what after this ?
You can use tool for discovering hidden parameters also like Arjun and check parameters if it work, you can use tool like dalfox very cool tool .
You can use automation by NUCLEI . templates .
I get open redirect by NUCLEI .
if you think i finish you are wrong .
but that are two bug only , where are others ?
after i got first xss i had an idea , i can use some google dorks .
google dorks for xss !!!! yep .
some google dorks for discovering parameters
site:*.host.com ext:asp
site:*.host.com ext:jsp
site:*.host.com ext:aspx
site:*.host.com ext:jspx
site:*.host.com ext:do
site:*.host.com ext:action
I use them but didn't have useful parameters .
I check subdomain if i can use it to search about it in google .
I found something doesnβt see it usually itβs index.cgi .
I asked myself why didnβt try to use google dorks about it .
site: *.host.com ext:cgi
site:*.nasa.gov inurl:index.cgi
I see good result , i checked this result itβs like last domain ,that i had found xss in it ,I tried to use same parameter lol it is working nice .
I checked about 11 domains but 7 had xss .
thinks for reading .
give me feedback .
Last updated