Skip to content
Branch: master
Find file History
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
..
Failed to load latest commit information.
client
mysql
server
README.md
docker-compose.yml
variables.env

README.md

存储型XSS

启动命令:

cd ./back-end/XSS/persistent
docker-compose up --build --force-recreate

打开浏览器,访问: http://127.0.0.1:8083

现在尝试在输入框里输入下面任意一行内容:

  • <script>alert(1)</script>
  • <svg><script>alert&#40;2)</script>

会发现无法弹窗,这个时候再使用 ModHeader 修改CLIENT-IP为上面的任意一行内容,即可发现弹窗

You can’t perform that action at this time.