cybNg.com

Mutillidae Insert Inject

Previous Next

You should have proper knowledge of basic Javascript


Inject using Js Script Code : Security label : 0,1

Normally user insert the username and password as the String , number or special character but as the hacker/penetration test we use the script code/mollicious code to inject it like show Alert message (pop-up),change the backgroud color of website, change text color, font-size etc.

  1. Open registration panel to create a new user account
  2. In Username field,you can use your own define name or script code
  3. In Password field , you can use your own define password or script code or use password generator option
  4. Use Signature filed as the <script> alert("Website Hacked");</script>

💡 Note: You can inject any input box with the javaScript Code just fill the script code as you want it will be work.

Now login with your username and password

you will get an alert message like this.

Note: if you have use Username and password as script code then use that code to login

How it work : Explained in deep


Change Background Color of page : Security label : 0,1

This is the funny process to change the background-color of hacked website

  1. Create an new user account and inject the script code to change the color , here we create an user that username and password as "Alex"
  2. In Signature field use Script code as <script> document.body.style.background = "yellow";</script>

Now login with your username and password

Note: Remember when you know the real username but not password then use this method, here we know the username that is default by "admin"


Previous Next
cybNg Designed for learning, testing and training. Examples are simplified to improve reading and basic understanding, tutorials and examples are constantly reviewed to avoid over-comprehension and errors, but we cannot warrant the complete accuracy of all content. While using this site, you agree to read and accept our use, cookie and privacy policy. All the information given in it is made for education purpose only, there will be no responsibility of this website or this organization for misuse of the information given in it. We hope that all the information provided in it is good for our students. So that it helps improve the cyber world.