Pinned

1. sg-patch-tools

   Tools to apply patches in Steins;Gate Android version.

   Python 1

2. cypher-injection-scanner

   a Burp Suite Extension that detects Cypher code injection

   Java 2 4

3. CIWA

   a insecure web application to test Cypher Injection

   HTML 4

4. exploring xss with ❤️

   1

   ## injection points

   2

   1. script tags

   3

   2. attributes with event handler value (onload, onerror, ...)

   4

     * 2.1. [some here](#event-handlers)

   5

     * 2.2. to discover others: search for events accepted by the app (use [this list](https://gist.github.com/morkin1792/8c9d2f1095d803b075e7a5a9e2aadea7#gistcomment-3368501)) and [try to evolve to an xss](https://portswigger.net/web-security/cross-site-scripting/cheat-sheet)