What is XSS blind?
Blind playing is just a common saying, that is, if the background does not know whether XSS exists or not, the input of XSS code is left blank, feedback, or something like that, try as many XSS statements and statements as possible.
"XSS blind" refers to the situation where attackers are unknown to the background after submitting data, the website uses the data that attackers insert into XSS attack code with real attack functions (usually using SCRIPT tags to introduce remote JavaScript code. When the unknown background does not filter the submitted data, the background administrator triggers XSS during operations to implement the "real attack function" predefined by the attacker ".
In other words, you need to input the information in advance when you see the input box.XSS code,Generally, the script label is used to introduce remote JS Code. When a background engineer reviews and submits data, he clicks the submitted data to trigger valuable information..
Reference: http://www.2cto.com/Article/201212/180534.html
Http://lcx.cc /? I = 3981.