Manually dig XSS vulnerabilities

One 、 Unfiltered XSS Inject

visit ：https://xss-quiz.int21h.jp

notes ： The content in the prompt will be displayed only after it is selected

example 1： First, let's take a look at the logical structure of the page

Input 1, spot Search,, Show that... Can't be found 1

F12 Look at the code , We input 1 Is loaded into the page

We load <script>alert(document.domain);</script>, then F12 Take a look at its place in the code . （document.domain # The property is a read-only string , Contains... To load the current document web The hostname of the server . ）

Input <script>alert(document.domain);</script>, spot Search, Popup