Advertisement
iAnonGuy

AnonGuy's Challenge [#8] - Solution

Mar 30th, 2015
431
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.58 KB | None | 0 0
  1. The challenge was to generate a document.domain alert/prompt :)) [STORED XSS]
  2. So First I registered in YouTube - As you guys know that YouTube doesn't accepts brackets >< in the video title so i used html entities instead so ~
  3. " == &quot;
  4. > == &gt;
  5. < == &lt;
  6. so basically i used &quot;&gt;&lt;marquee&gt;XSS-ed by AnonGuy ;)&lt;/marquee&gt; as the title
  7. and this as the description &quot;&gt;&lt;img src=x onerror=prompt(document.domain);&gt;
  8. then i fetched the video from playit which resulted in a document.domain prompt
  9. Demo ~ http://playit.pk/search?q=61Uvw4KPv8c
  10. ~ AnonGuy :))
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement