takeda.github.io/xss.html at main · windware1203/takeda.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
<!DOCTYPE html>
<html>
	<head>
		<link rel="stylesheet" href="indexStyle.css">
        <script src="xss.js" async></script>

	<link rel="Shortcut Icon" type="image/x-icon" href="img/home.ico" />


	<link href="https://fonts.googleapis.com/css2?family=Noto+Serif+TC:wght@600&display=swap" rel="stylesheet">

	<link href="https://fonts.googleapis.com/css2?family=Rock+Salt&display=swap" rel="stylesheet">

	<link href="https://fonts.googleapis.com/css2?family=Noto+Serif+TC:wght@600&display=swap" rel="stylesheet">

	<link href="https://fonts.googleapis.com/css2?family=Bodoni+Moda:wght@500&display=swap" rel="stylesheet">
	<link rel="preconnect" href="https://fonts.gstatic.com">
	<link href="https://fonts.googleapis.com/css2?family=Mr+De+Haviland&display=swap" rel="stylesheet">
	<link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Rosario:wght@600&display=swap" rel="stylesheet">
    <link href="https://fonts.googleapis.com/css2?family=Alice&display=swap" rel="stylesheet">
	</head>
    <style>
        *{
            font-size: 120%;
        }
    </style>
	<meta charset="utf-8">
	<title></title>
	<body>
        <h1 class="title-a">Attack example:</h1>
        <h1><code>&lt;img src=x onerror=alert(1)&gt;</code></h1>
        <h1><code>&lt;script&gt;alert("I'm so BAD");&lt;/script &gt;</h1>
		<form method="get" action="xss.js">
			<h1>Plz input: &nbsp;<input type="text" name="input"/></h1>
			<h1><input type="submit" onclick="onSubmit(input.value)" value="submit"/></h1>
		</form>
	</body>
	<!-- 我是壞人！ <script>alert("我是壞人！");</script> -->

</html>