Skip to content

Instantly share code, notes, and snippets.

@starcoder017
starcoder017 / HTMLEntitiesBypass.php
Created May 19, 2019 15:02
HTML Entities Bypass
<!DOCTYPE html>
<!-- Vulnerable Code-->
<html>
<body>
<script>
document.write("<?php $xs=$_GET['payload']; echo htmlentities($xs);?>");
</script>