Find a xss’s vulnerable website is not very difficult. In most cases can write in the search: Code: “><script>alert(‘try_xss’);</script> This script does nothing more than send an alert on the…
In most cases can write in the search:
Code:
This script does nothing more than send an alert on the screen, if you see the alert means that the script is taken into the site.
Now we try to write:
Code:
“><script>alert(document.cookie);</script>
If this xss works, we will see on the screen the alert within our cookies session of the site.