Skip to content

Instantly share code, notes, and snippets.

@cyper85
Last active December 6, 2018 23:26
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save cyper85/b6e5a0c09f3358829d71b475a23d709b to your computer and use it in GitHub Desktop.
Save cyper85/b6e5a0c09f3358829d71b475a23d709b to your computer and use it in GitHub Desktop.
JavaScript Beispiel, wie man aus einem String ausbrechen kann.
<!DOCTYPE html>
<html>
<head>
<title>Fuck XSS</title>
</head>
<body style="background-color:red;">
<script>
var test = '--></title></script></iframe></style></textarea></span><svg/onload=alert(String.fromCharCode(49))>';
alert(test);
document.getElementsByTagName("body")[0].style.backgroundColor = "green";
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment