2 ms·
If your only goal is to send the user to a malicious page with a payload then you don't need any user action. Just do: document.location.href = "http://malware
by batiste 14y ago
If your only goal is to send the user to a malicious page with a payload then you don't need any user action.
Just do: document.location.href = "http://malware.com http://malware.com;
And you are done.
- bilawal 14y agoHeck, if you're going to do that.. you don't even need JavaScript. <meta http-equiv="refresh" content="0; url=http://malware.com http://malware.com />