Open Bug Bounty Community Forum

Hi
I report an XSS who requires user enter XSS payload on First and Last Name field on website , i need to put all POST request on report or only vulnerable parameters?
Vulnerability isnt still validated , what i need to do?
I think i report it wrong

ruisilva2015 wrote:Hi
I report an XSS who requires user enter XSS payload on First and Last Name field on website , i need to put all POST request on report or only vulnerable parameters?
Vulnerability isnt still validated , what i need to do?
I think i report it wrong

you must provide all post parameters

ruisilva2015 wrote:Hi
I report an XSS who requires user enter XSS payload on First and Last Name field on website , i need to put all POST request on report or only vulnerable parameters?
Vulnerability isnt still validated , what i need to do?
I think i report it wrong

Hi there RUI, thanks for your post/question here in the OpenBugBounty Forum.
Well, the best advice is to tell you, you need something like ‘Tamper Data’ or ‘Live http Headers‘, using these kind of extensions you are able to ‘catch up‘ the POST paramaters, wich OpenBugBounty asks for. (or simply use FireBug or Chromes Dev Tools)
E.g. x-www-form-urlencoded or multipart/form-data can be retreived by using the above called extensions.

Happy Hunting!
Sincerely,

Roy Jansen
(https://www.openbugbounty.org/researchers/rj01/)

i wanted to add that you can also use hackbar to capture a post request

Thanks guys