Title: Daily SRC in xss tips

0x00 Preface

Regarding the public test and exclusive test, how to pick up xss holes, hydrology, hydrology, hydrology!

0x01  Daily Test

Daily boring testing site. When you are in penetration testing, you find that there is an html tag calling the image in the server, and it is the type that adds the server IP address. You can try to fuzz by modifying the host header to detect whether there is xss. Seeing this situation, we can roughly guess that the latter code may look like: img src='?php echo 'http://{$_SERVER['HTTP_HOST']}/'?xxx/aaa.png'/This seems very simple. Modifying the host in the request package can cause xss.

Success pop-up window The tips to pick up rags were completed.

Reprinted from the original link: https://blog.csdn.net/Guapichen/article/details/124040935?spm=1001.2014.3001.5501