From 6079478d4cf794d85df274e9ebaa1b51dc828bf4 Mon Sep 17 00:00:00 2001 From: Somdev Sangwan Date: Tue, 8 Jan 2019 18:01:34 +0530 Subject: [PATCH] fixed the encoding table and fixed a payload --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 0f2a832..679e7be 100644 --- a/README.md +++ b/README.md @@ -339,7 +339,7 @@ If the your dummy tags lands in the source code as it is, go for any of these pa |`?`|?|`?`|question mark|u+003F|\003f|\77| |`@`|@|`@`|at sign; commercial at|u+0040|\0040|\100| |`[`|\[|`[`|left square bracket|u+005B|\005b|\133| -|`\`|/\|`\`|backslash|u+005C|\005c|\134| +|`\`|/|`\`|backslash|u+005C|\005c|\134| |`]`|]|`]`|right square bracket|u+005D|\005d|\135| |`^`|^|`^`|circumflex accent|u+005E|\005e|\136 |`_`|_|`_`|low line|u+005F|\005f|\137| @@ -355,7 +355,7 @@ If the your dummy tags lands in the source code as it is, go for any of these pa - You can use `//` to close a tag instead of `>`. - I have found that `confirm` is the least detected pop-up function so stop using `alert`. - Quotes around attribute value aren't neccessary as long as it doesn't contain spaces. You can use `