4 ms·
What is lvl2's answer? I'm trying: <img src='invalid_link.png' onerror="this.src='alert(1);'">
by instakill 12y ago
What is lvl2's answer? I'm trying:
<img src='invalid_link.png' onerror="this.src='alert(1);'">
- SimeVidas 12y agojust onerror="alert(1)" :)
- JustMadMike 12y agoI did <a onclick="alert('hakz');">click</a>
- dagurp 12y agoMe too, except I used a button tag. Feels like cheating though.
- stevekemp 12y agoMy solution was: <img src="foo" onMouseOver="alert(33);" Interesting to see so many people used onError instead.
- octatone2 12y agoimg src='garbage' onerror='script' is gauranteed to auto execute, where mouseover requires the user to mouse over the element.
- dpacmittal 12y agoI used just onclick
- dnvsasm 12y agoonerror= is usually the one used in CTF and XSS examples!
- Toadsoup 12y agoOne of the hints says you can use onError() I'm sure that's where most people are getting it from.