updated payloads

2024-06-14 19:07:34 +05:30 · 2024-06-14 19:07:34 +05:30 · 54142c9eb1
parent c43b5d84a8
commit 54142c9eb1
1 changed files with 4 additions and 12 deletions
--- a/dast/vulnerabilities/xss/reflected-xss.yaml
+++ b/dast/vulnerabilities/xss/reflected-xss.yaml
@ -19,17 +19,9 @@ http:

    payloads:
      reflection:
-        - "'\"><{{first}}"
-        - "<img src=x onerror=alert({{first}})>"
-        - "<script>alert({{first}})</script>"
-        - "'><ScRiPt>alert({{first}})</sCrIpT>"
-        - "</script><ScRiPt>alert({{first}})</sCrIpT>"
-        - "</script><script>alert({{first}})</script>"
-        - "<body onload=alert({{first}})>"
-        - "<marquee><img src=x onerror=confirm({{first}})></marquee>"
-        - "'><img%20src=xxx:x%20\x20onerror=javascript:alert({{first}})>"
-        - "'\"><img%20s+src+c=x%20on+onerror+%20=alert({{first}})>"
-        - "'%3e%3cscript%3ealert({{first}}*{{first}})%3c%2fscript%3eejj4sbx5w4o"
+        - "'\"><{{first}}>"
+        - "'><{{first}}>"
+        - "\"><{{first}}>"

    fuzzing:
      - part: query