3 ms·
Why is he using Google Analytics for sending the XSS?
by jonaslejon 13y ago
Why is he using Google Analytics for sending the XSS?
- nilsjuenemann 13y agoThere are two options: 1) He is using Windows and is not using Burp or ZAP proxy for modifying http requests. With Windows you can't use <>"= in a filename. 2) Gmail is handling emails from Google Analytics a bit different. (I don't think so)
- jonknee 13y ago> "By using the generated report from Google Analytics I could inject script code that was executed on mail.google.com"
- msane 13y agoTo get around http://en.m.wikipedia.org/wiki/Same-origin_policy http://en.m.wikipedia.org/wiki/Same-origin_policy