Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: gdraperi/xss_payloads
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: b2ab0d0
Choose a base ref
...
head repository: nettitude/xss_payloads
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 893d1e1
Choose a head ref
  • 13 commits
  • 2 files changed
  • 1 contributor

Commits on May 7, 2019

  1. Added dropper.php

    @strawp
    strawp committed May 7, 2019
    Configuration menu
    Copy the full SHA
    04b7d04 View commit details
    Browse the repository at this point in the history

Commits on May 31, 2019

  1. First reasonably working version

    @strawp
    strawp committed May 31, 2019
    Configuration menu
    Copy the full SHA
    f8eaa24 View commit details
    Browse the repository at this point in the history

  2. Visual tweaks

    @strawp
    strawp committed May 31, 2019
    Configuration menu
    Copy the full SHA
    109b802 View commit details
    Browse the repository at this point in the history

Commits on Jul 17, 2019

  1. Added JSFuck obfuscation

    @strawp
    strawp committed Jul 17, 2019
    Configuration menu
    Copy the full SHA
    61c2a79 View commit details
    Browse the repository at this point in the history

Commits on Jul 29, 2019

  1. Added JSF*** obfuscation

    @strawp
    strawp committed Jul 29, 2019
    Configuration menu
    Copy the full SHA
    d4a455a View commit details
    Browse the repository at this point in the history

Commits on Jul 31, 2019

  1. Added in execution methods to pass payload strings into: 

     - eval()
 - Function()()
 - setTimeout()

and also referencing the above via the `window` object, e.g.

`window['eval']('alert(1)')`
    @strawp
    strawp committed Jul 31, 2019
    Configuration menu
    Copy the full SHA
    b8b866e View commit details
    Browse the repository at this point in the history

  2. Merge conflict resolved

    @strawp
    strawp committed Jul 31, 2019
    Configuration menu
    Copy the full SHA
    6e8780e View commit details
    Browse the repository at this point in the history

  3. Resolved merge and bugs

    @strawp
    strawp committed Jul 31, 2019
    Configuration menu
    Copy the full SHA
    49b638e View commit details
    Browse the repository at this point in the history

Commits on Aug 9, 2019

  1. Added custom element / event injection type

    @strawp
    strawp committed Aug 9, 2019
    Configuration menu
    Copy the full SHA
    2019252 View commit details
    Browse the repository at this point in the history

Commits on Jul 16, 2021

  1. Added encoding options

    @strawp
    strawp committed Jul 16, 2021
    Configuration menu
    Copy the full SHA
    8502427 View commit details
    Browse the repository at this point in the history

Commits on Jul 17, 2021

  1. Updated readme

    @strawp
    strawp committed Jul 17, 2021
    Configuration menu
    Copy the full SHA
    1801217 View commit details
    Browse the repository at this point in the history

Commits on Aug 4, 2021

  1. Added JS Unicode encoding

    @strawp
    strawp committed Aug 4, 2021
    Configuration menu
    Copy the full SHA
    1562f11 View commit details
    Browse the repository at this point in the history

Commits on Aug 5, 2021

  1. Also hex escapes, why not

    @strawp
    strawp committed Aug 5, 2021
    Configuration menu
    Copy the full SHA
    893d1e1 View commit details
    Browse the repository at this point in the history
Loading