Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-28 07:31:10 +00:00
Code Issues Projects Releases Packages Wiki Activity
hacktricks/pentesting-web/xs-search/javascript-execution-xs-leak.md

3.9 KiB
Raw Blame History

Execução de JavaScript XS Leak

Aprenda hacking AWS do zero ao herói com htARTE (HackTricks AWS Red Team Expert)!
```javascript // Code that will try ${guess} as flag (need rest of the server code app.get('/guessing', function(req, res) { let guess = req.query.guess let page = `<html> <head> </head>

hello2

</html>` res.send(page) }); ``` Página principal que gera iframes para a página anterior `/guessing` para testar cada possibilidade ```html <html> <head>

</head>

hello

</html> ```
Aprenda hacking AWS do zero ao herói com htARTE (HackTricks AWS Red Team Expert)!