> pwn.now.sh
An Exploit Dev Target
This page is vulnerable to many of the common web attack vectors. It also has secrets stashed in various locations. Feel free to use it to develop or practice your attacks. See some examples. View the source.
Use POST
Use GET (Overides POST Values)
To inject content into the HTTP Header use the header parameter like this
To inject content into the Cookie use the cookie parameter like this
To inject CSS into the <HEAD> use the css parameter like this
To inject CSS into the <BODY> use the css2 parameter like this
To inject content into the <HEAD> tag use the head parameter like this
To inject content into the <BODY> tag use the body parameter like this
To inject content into the <SCRIPT> tag use the script parameter like this
The BODY secret value is:
SECRET_SQUIRREL.4430422228146