阿里云先知社区xss挑战题源码

@L3m0n师傅 的wp

https://xianzhi.aliyun.com/forum/read/2044.html

微信公众号阅读地址:

http://mp.weixin.qq.com/s/d_UCJusUdWCRTo3Vutsk_A

@LoRexxar师傅的解读

https://lorexxar.cn/2017/08/31/xss-ali/

在线挑战地址

http://t.r00tuserclient.xyz/xianzhi_xss/

题目uri

1. xss1_uploadfiles
2. xss2_getallheaders
3. xss3_json
4. xss4_referer
5. xss5_redirect
6. xss6_forcedownload
7. xss7_textplain
8. xss8_tag
9. xss9_plaintext
10. xss10_mvm
11. xss13_request_uri
12. xss14_hidden
13. xss15_frameBuster
14. xss16_phpself
15. xss17_passiveElement
16. xss18_graduate
17. xss19_party
18. xss20_theend
19. xss21_othersJquery

ex: 题目1：http://t.r00tuserclient.xyz/xianzhi_xss/xss1_uploadfiles/