+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Encode this to work on google chrome. (/showthread.php?tid=4986165)
Encode this to work on google chrome. - Skidy - Sep 13, 2015
<img src="/" onerror=alert(1);>
This works on a website, on internet explorer though not google chrome. Can anyone encode this so that it bypasses the chrome XSS filter and works on Chrome?
I am willing to give a small reward if you can get it to work. (If this is in the wrong section please move it).
* - Beladonis - Sep 13, 2015
Try this : http://blog.securitee.org/?p=37
* - Skidy - Sep 13, 2015
(Sep 13, 2015 07:51 AM)Beladonis Wrote: Try this : http://blog.securitee.org/?p=37
Been sent that so many times, its outdated and doesn't work
* - cheatson - Sep 13, 2015
(Sep 13, 2015 01:27 PM)benny_boy Wrote: Been sent that so many times, its outdated and doesn't work
Bypasses pop up now and again on blogs but the shelf-life will be short as either the blog poster or audience will report it. I even posted one I found back in late 2013 and got response: "we do not generally reward XSSauditor bugs, because XSSAuditor is a best-effort line of defense when the flaw is in the website." The auditor code is open-source, so go inspect it and find your own! (then keep it to yourself ! 🤭)