{"id":455,"date":"2026-09-13T14:22:25","date_gmt":"2026-09-13T06:22:25","guid":{"rendered":"https:\/\/cookie-qwq.xyz\/?p=455"},"modified":"2026-09-13T14:22:57","modified_gmt":"2026-09-13T06:22:57","slug":"xss-labs-%e7%ac%ac%e5%8d%81%e4%b8%89%e5%85%b3","status":"publish","type":"post","link":"https:\/\/blog.cookie-qwq.xyz\/index.php\/2026\/09\/13\/xss-labs-%e7%ac%ac%e5%8d%81%e4%b8%89%e5%85%b3\/","title":{"rendered":"XSS-Labs\/\u7b2c\u5341\u4e09\u5173"},"content":{"rendered":"\n

\u7b2c\u5341\u4e09\u5173\uff0cCookie\u8bf7\u6c42\u5934\u6ce8\u5165<\/mark><\/strong><\/p>\n\n\n\n

\u67e5\u770blevel13.php\u6587\u4ef6<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u8fd8\u662f\u548c\u524d\u4e24\u5173\u4e00\u6837\uff0c\u9700\u8981HTTP\u8bf7\u6c42\u5934\u6ce8\u5165<\/mark><\/strong>\uff0c\u8fd9\u6b21\u6362\u6210\u4e86Cookie<\/mark><\/strong>\uff0c\u5e76\u4e14Cookie<\/mark><\/strong>\u7684\u503c\u4e3auser<\/mark><\/strong>\uff0c\u76f8\u5f53\u4e8e\u83b7\u53d6\u540d\u4e3auser\u7684Cookie\u503c<\/mark><\/strong>\uff0c\u53c2\u6570\u53d8\u6210\u4e86t_cook\uff0c\u5e76\u4e14\u4e5f\u6ca1\u6709\u8fc7\u6ee4\u53cc\u5f15\u53f7\uff08”\uff09<\/p>\n\n\n\n

\u524d\u7aef\u4ee3\u7801<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u4f9d\u65e7\u9690\u85cf\u5c5e\u6027\u3002<\/p>\n\n\n\n

\u7531\u4e8e\u548c11\u300112\u5173\u539f\u7406\u57fa\u672c\u4e0a\u4e00\u6837\uff0c\u8fd9\u91cc\u76f4\u63a5\u4f7f\u7528Burp Suite<\/mark><\/strong>\u8bb0\u5f55\u672c\u5173\u5361\u3002<\/p>\n\n\n\n

\uff081\uff09Burp Suite<\/mark><\/strong><\/p>\n\n\n\n

= w =\uff1a\u5c31\u4e0d\u8bb0\u5f55\u8be6\u7ec6\u6b65\u9aa4\u4e86<\/p>\n\n\n\n

\u6784\u9020payload\uff1a<\/mark><\/strong><\/p>\n\n\n\n

\u7531\u4e8e\u540e\u7aef\u662f\u83b7\u53d6\u540d\u4e3auser<\/mark><\/strong>\u7684Cookie<\/strong><\/mark>\u503c\uff0c\u6240\u4ee5\u8981\u52a0\u4e0auser=<\/mark><\/strong><\/p>\n\n\n\n

Cookie: user=”type”text” onclick=”alert()””<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u5728Response\u91cc\u590d\u5236\u6e32\u67d3\u7684\u7f51\u9875URL\uff0c\u653e\u5230BP\u4ee3\u7406\u6d4f\u89c8\u5668\u4e2d\u8bbf\u95ee\uff0c\u5e76\u70b9\u51fb\u8f93\u5165\u6846\u3002<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

<\/p>\n\n\n\n

\uff082\uff09\u5728\u6d4f\u89c8\u5668\u63a7\u5236\u53f0\u4fee\u6539Cookie<\/mark><\/strong><\/p>\n\n\n\n

F12\u6216\u8005Ctrl + Shift + I\uff0c\u5728\u5f00\u53d1\u8005\u5de5\u5177\u680f\u4e2d\u9009\u62e9console<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u8f93\u5165\u4ee5\u4e0b\u5185\u5bb9\uff1a<\/p>\n\n\n\n

tips\uff1a\u7531\u4e8eCookie\u672c\u8eab\u5b58\u50a8\u5728\u6d4f\u89c8\u5668\u4e2d\uff0c\u53ef\u4ee5\u4e0d\u7528\u6293\u5305\uff0c\u7528JavaScript\u4ee3\u7801\u64cd\u4f5c\u3002<\/mark><\/strong><\/p>\n\n\n\n

document.cookie = ‘user=”type=”text” onclick=”alert()””‘\uff0c\u56de\u8f66\uff0c\u518d\u6309F5\u5237\u65b0\u754c\u9762<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u5c31\u4f1a\u51fa\u73b0\u8f93\u5165\u6846\uff0c\u70b9\u51fb\u8f93\u5165\u6846\u3002<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"

\u7b2c\u5341\u4e09\u5173\uff0cCookie\u8bf7\u6c42\u5934\u6ce8\u5165 \u67e5\u770blevel13.php\u6587\u4ef6 \u8fd8\u662f\u548c\u524d\u4e24\u5173\u4e00\u6837\uff0c\u9700\u8981HTTP\u8bf7\u6c42\u5934\u6ce8\u5165\uff0c\u8fd9 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[17,22],"class_list":["post-455","post","type-post","status-publish","format-standard","hentry","category-archives","tag-xss","tag-xss-labs"],"_links":{"self":[{"href":"https:\/\/blog.cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/posts\/455","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/comments?post=455"}],"version-history":[{"count":1,"href":"https:\/\/blog.cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/posts\/455\/revisions"}],"predecessor-version":[{"id":465,"href":"https:\/\/blog.cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/posts\/455\/revisions\/465"}],"wp:attachment":[{"href":"https:\/\/blog.cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/media?parent=455"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/categories?post=455"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/tags?post=455"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}