Skip to content

aaronesau-summit/case-insensitive-xss

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 

Repository files navigation

About

Do you need to convert your JS to strictly uppercase or lowercase? No problem. This is a web app that converts it for you.

https://arinerron.github.io/case-insensitive-xss/index.html

How does it work?

Basically, it JSF*ck-encodes eval(decodeURIComponent(...)) where ... is your JavaScript, and URL encodes the other uppercase/lowercase characters.

Does it always work?

Yes, as long as the target app's CSP whitelists eval.

About

Automatic uppercase/lowercase XSS payload conversion

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • HTML 100.0%