This forum is in archive mode. You will not be able to post new content.

Author Topic: Encoded XSS Url  (Read 1093 times)

0 Members and 1 Guest are viewing this topic.

Offline lailaila

  • /dev/null
  • *
  • Posts: 7
  • Cookies: 1
    • View Profile
Encoded XSS Url
« on: September 08, 2012, 12:43:24 PM »
hi,
there is encoded xss, it looks: <script>alert("xss")</script>
script: %3Cscript%3Ealert(%22xss%22)%3C%2Fscript%3E


if web security blocking html chars, so you can use this code. :)
goodluck :)

Offline relax

  • Sir
  • ***
  • Posts: 562
  • Cookies: 114
  • The one and only
    • View Profile
Re: Encoded XSS Url
« Reply #1 on: September 08, 2012, 05:45:13 PM »
yeah heres a site for xss exapels
http://ha.ckers.org/xss.html
at the bottom there is converter to

Offline Phage

  • VIP
  • Overlord
  • *
  • Posts: 1280
  • Cookies: 120
    • View Profile
Re: Encoded XSS Url
« Reply #2 on: September 08, 2012, 07:37:22 PM »
This must be some of the first you Will learn in xss. And this Will in most cases not even work since thèrese are a very few sites which has such a poor Security.
"Ruby devs do, in fact, get all the girls. No girl wants a python, but EVERY girl wants rubies" - connection

"It always takes longer than you expect, even when you take into account Hofstadter’s Law."

 



Want to be here? Contact Ande, Factionwars or Kulverstukas on the forum or at IRC.