Shulou(Shulou.com)05/31 Report--

This article introduces you how to use the xss vulnerability Shua box rank, the content is very detailed, interested friends can refer to, I hope to help you.

Let's dig the xss of the small mall, because the xss of the mall has many input points.

01

Step 1:

Search box judgment:

onfocus=alert1 autofocus

Those two are backquotes, actually available, in the case of not using ' " ( ), but generally close the value of"

" onfocus=alert('1') autofocus "

"onclick="alert(1)

">

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.