XSStrike icon indicating copy to clipboard operation
XSStrike copied to clipboard

Blind XSS Parameter Issue

Open tekcap opened this issue 2 years ago • 1 comments

If the blind xss payload in config.py starts with ", then it causes issues with the payload when the script is run.

If we use the following as our payload:

">

And we run the script with debug on, this is what the value in the parameter looks like:

"">"

There is now a backslash added to the front, which changes the payload.

tekcap avatar Sep 23 '22 22:09 tekcap

I'm also trying to figure out what the format/syntax should be when adding a custom blind payload.

Cdaprod avatar Jan 04 '23 15:01 Cdaprod