---
title: "Discussion on \"Breached Credentials Lead to Admin Account Compromise via stored XSS\" | Hashnode"
description: "Discussion on \"Breached Credentials Lead to Admin Account Compromise via stored XSS\". Web application pentesting starts by obtaining credentials through OSINT, leads to gaining initial access, followed by an XSS attack to become admin."
url: "https://hashnode.com/posts/breached-credentials-lead-to-admin-account-compromise-via-stored-xss/6a81e79ba4fc0cf163fda2d1"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Breached Credentials Lead to Admin Account Compromise via stored XSS](https://m1h.hashnode.dev/breached-credentials-lead-to-admin-account-compromise-via-stored-xss?utm_source=hashnode&utm_medium=feed)

Web application pentesting starts by obtaining credentials through OSINT, leads to gaining initial access, followed by an XSS attack to become admin.

Aug 16 · 5 min read · m1h.hashnode.dev  
Updated Aug 20  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#xss](https://hashnode.com/tag/xss)
-   [#pentesting](https://hashnode.com/tag/pentesting)
-   [#websecurity](https://hashnode.com/tag/websecurity)
-   [#ctf](https://hashnode.com/tag/ctf)

## Written by

[M1H](https://hashnode.com/@m1h)

@m1h · EMEA

  
[View profile](https://hashnode.com/@m1h)

Security Researcher | Bug Bounty Hunter | Purple Team | CTF Player

Penetration tester and security researcher. I disclose vulnerabilities, break into things legally, and write about pentesting, blue team ops, and secure code review. NASA VDP Letters of Recognition · Multiple Hall of Fames. 100+ CTFs completed.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.