New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: add generate payload with replace mode #1

Merged

ac0d3r merged 2 commits into ac0d3r:main from moonD4rk:main

May 1, 2022

Contributor

moonD4rk commented May 1, 2022 •

edited

Loading

如果有这么一个 html, xss 触发点在 fragment 上，现有 payload 的追加字符串的生成方式是无法检测到的
生成 payload 时，使用 replace 替换原始字符串，可以增加检测到的概率

http://127.0.0.1/index-eval.html#1234

<html>
  <body>
    <script>
      var payload = window.location.hash.substr(1);eval(payload); 
    </script>
  </body>
</html>

moonD4rk added 2 commits

May 1, 2022 15:03


          chore: fix typo

03a1714


          feat: add generate payload with replace mode

8b77586

ac0d3r merged commit 3539bca into ac0d3r:main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet