diff --git a/README.md b/README.md index f4563a5..1f8c01e 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,12 @@ -AJAX_JSON_XSS_POC +AJAX_JSON_XSS_POC =============== -PoC Demonstrating XSS Via AJAX+JSON \ No newline at end of file +**PoC Demonstrating XSS Via AJAX+JSON** + +Too many people have argued that when XSS is found in JSON data that it would not be rendered in the browser. + +They either think it's due to it being JSON/XML etc. or because it contains an error code (400/500 etc.) + +This prooves that not to be the case: + +![XSS_AJAX_PoC](https://rossmarks.uk/git/0xRM/AJAX_JSON_XSS_POC/raw/5b8eea36a1ce6192b5111045c243b6b1f5ecb28e/XSS_AJAX_PoC.png) \ No newline at end of file