Application of encoding in XSS

One 、 Use encoding to bypass filtering - Conduct XSS Inject

1、Stage #15 Hexadecimal bypass

Stage #15 Address ： https://xssquiz.int21h.jp/stage__15.php?sid=bdebf58d6cee62495a283af53d445e874dcfcad0

The entered information will be displayed in the black text box at the bottom of the page .

Try direct injection payload： "><script>alert(document.dodomainmain);</script>

The input double quotation marks and left and right angle brackets are all escaped into the entity character code .

Use hexadecimal to bypass

Hexadecimal Introduction ： Hexadecimal [ˌheksəˈdesɪml] Hexadecimal

Hexadecimal （ Shorthand for hex Subscript or subscript 16） It is a kind of meeting in mathematics 16 Into the 1 Carry system . Generally, numbers are used 0 To 9 And letters A To F（ or a~f࿰