You’d have to think of something like this:
Let’s say you had a text box, to type something, as a username:
User Name : <input ... value="Nome">
Now, if you typed like this:"onmouseover="event
<input ... value=" "onmouseover="evento ">
Or something like that:
We have a text box, type of a browser, if we type such a thing, it can appear "No results found for [searched word]"
And if we type: Code, and the browser or other site doesn’t find anything, if you don’t have any security, you can run the script.
Let’s say this is HTML code:
<div>Não foi encntrado nenhum resultado para <script>alert("script")</script></div>
Example 2:
<script type="text/javascript">
function Pesquise(){
/*Script do navegador ou parte de pesquisa de um site*/
document.getElementById("Result").innerHTML = "Não foi encontrado nenhum resultado para " + document.getElementById("CaixaPesquisa").value;
}
</script>
<input id="CaixaPesquisa" type="text" value="Código aqui"/><input type="submit" value="Pesquisar" onclick="Pesquise();"/>
<div id="Result">
</div>
Tampermonkey or Greasemonkey.
– Jéf Bueno
Thank you very much! These two tools will help me a lot.
– Charles Fay