I'm trying to do an XSS attack test on a website.
I am using
<> just fine and I have managed to escape the string. Now I'm trying to send my own cookie to my server that saves it to a txt file.
I inject this code to send the cookie:
The only problem is that it encodes both single quotes (
') and it changes to
%27. Is there any way I can bypass this encoding on single quotes or inject the code somehow without single quotes?