Skip to content

Instantly share code, notes, and snippets.

@FernandoZhuang

FernandoZhuang/XssJs过滤引号弹框.html

Created June 14, 2018 06:21
Show Gist options
  • Save FernandoZhuang/dcfbf60bca0123ff3d9d19a314118497 to your computer and use it in GitHub Desktop.
Save FernandoZhuang/dcfbf60bca0123ff3d9d19a314118497 to your computer and use it in GitHub Desktop.
Download ZIP
XssReflectedCrossSite
Raw
XssJs过滤引号弹框.html
<!--Vulnerbility注入点: 输入的是2333"alert(1)
<label><h4 id="twoH4">
<script type="text/javascript">
var two = document.getElementById('twoH4');
var two_value = "2333alert(1)";
two.innerHTML=two_value;
</script>
</h4></label>
-->
<!--Inject输入: </script> <script>alert(1)</script>-->
<label><h4>
<script type="text/javascript">
var you = 'iloveyou';
document.write('</script> <script>alert(1)</script>'+','+you);
</script>
</h4></label>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment