5 ms·
can someone share theirs hosted script that echos and alert? :D
by 0x4139 12y ago
can someone share theirs hosted script that echos and alert? :D
- jonaspf 12y agohttps://rawgit.com/JonasPf/7bf2f1628aad57dbde56/raw/79910b56c00d92012bffe70294891cfde4ca296a/gistfile1.js https://rawgit.com/JonasPf/7bf2f1628aad57dbde56/raw/79910b56...
- krizan 12y ago//dl.dropboxusercontent.com/u/18177522/google_xss_game/alert.js
- sebslomski 12y agodata:text/javascript,alert('foo')
- LeonM 12y agoThank you sir! I learned something new today =)
- releasedatez 12y agoThank you!
- SimeVidas 12y agoJust add a foo.js file to any of your GitHub repos, grab its raw URL and pass it through rawgit.com.
- octatone2 12y agoThey provided a hosted callback in the clues. Just change foo to alert.
- adricnet 12y agoThe callback in the hints didn't work for me in the game, but the other suggestions here are working and quite eye opening ... That this works is really scary if not fully surprising: data:text/javascript;base64,YWxlcnQoMTMzNyk= Thanks jehna1 , sebslomski , all!
- juliann 12y agoit works, you just gotta use it like google.com/jsapi?callback=alert
- curveship 12y agohttps://curveship.org/alert.js https://curveship.org/alert.js
- dpacmittal 12y agohttps://pastebin.mozilla.org/?dl=5282262 https://pastebin.mozilla.org/?dl=5282262
- jehna1 12y agoYou don't need to: data:text/javascript;base64,YWxlcnQoMTMzNyk=