I have found that Cross Site Scripting vulnerability in a client's application. The problem is that the vulnerable parameter does not accept parentheses. So something like alert(document.cookie)
will be rejected because of parentheses. I can get XSS using alert `xss`
but I my client requires a proof of being able to access the DOM.
In other words, How can I alert(document.cookie)
without parentheses , are there any alternatives?
Thanks!