Last active
December 6, 2018 23:26
-
-
Save cyper85/b6e5a0c09f3358829d71b475a23d709b to your computer and use it in GitHub Desktop.
JavaScript Beispiel, wie man aus einem String ausbrechen kann.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<!DOCTYPE html> | |
<html> | |
<head> | |
<title>Fuck XSS</title> | |
</head> | |
<body style="background-color:red;"> | |
<script> | |
var test = '--></title></script></iframe></style></textarea></span><svg/onload=alert(String.fromCharCode(49))>'; | |
alert(test); | |
document.getElementsByTagName("body")[0].style.backgroundColor = "green"; | |
</script> | |
</body> | |
</html> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment