XSS Test
by
@brutelogic
Hello,
! <br> <br> <br> Find user profile providing one or more below: <!-- URL Reflection --> <form action="/xss.php" method="POST"> <br> User <br> <!-- Inline HTMLi (Double Quotes) --> <input type="text" name="b1" value=""> <br> <br> Email <br> <!-- Inline HTMLi (Single Quotes) --> <input type="text" name="b2" value=''> <br> <br> Name <br> <!-- Inline HTMLi - No Tag Breaking (Double Quotes) --> <input type="text" name="b3" value=""> <br> <br> Group <br> <!-- Inline HTMLi - No Tag Breaking (Single Quotes) --> <input type="text" name="b4" value=''> <br> <br> <!-- Inline HTMLi - No Tag Breaking on Input Hidden (Double Quotes) --> <input type="hidden" name="b5" value=""> <br> <br> Group <br> <!-- Inline HTMLi - No Tag Breaking on Input Hidden (Single Quotes) --> <input type="hidden" name="b6" value=''> <br> <br> <input type="submit" id="i" value="Find"> </form> <script> // HTMLi in Js Block (Single Quotes) var c1 = 'value1'; // HTMLi in Js Block (Double Quotes) var c2 = "value2"; // Simple Js Injection (Single Quotes) var c3 = 'value3'; // Simple Js Injection (Double Quotes) var c4 = "value4"; // Escaped Js Injection (Single Quotes) var c5 = 'value5'; // Escaped Js Injection (Double Quotes) var c6 = "value6"; </script> <script src=/x.js></script> </body> <footer> <br> <br> <p style="font-size:11px">© 2024 Brute Logic - All rights reserved.</p> </footer> </html>