Added dropper.php

2024-11-10 06:34:14 +00:00 · 2019-05-07 10:59:34 +01:00 · 2019-05-07 10:59:34 +01:00 · 04b7d04105
commit 04b7d04105
parent b2ab0d0f54
1 changed files with 28 additions and 0 deletions
--- a/dropper.php
+++ b/dropper.php
@ -0,0 +1,28 @@
+<?php
+  /**
+    XSS Payload generator and dropper
+  */
+
+  /**
+    Payload types
+      - Request URL (img)
+      - Request URL (XHR)
+      - Load script ($.getScript())
+      - Load script (document.createElement())
+      - Dropper (multiple scripts / automatic payload)
+
+    Injection
+      - Basic polyglot / inline script
+      - 0xsobky - Ultimate XSS Polyglot
+      - String variable escape
+      - img element onerror
+      - SVG element
+      - Element onclick
+
+    Obfuscation
+      - base64 (btoa())
+      - reverse
+      - String.fromCharCode()
+
+  */
+?>