1

At first, I attempted to Base64-encode a minified version of this JavaScript and include it within the onerror event of the XSS payload. It would then be decoded and executed using eval(atob()), as shown below:

The sentence is from How I Built An XSS Worm On Atmail. I have met this one serveral time. I can't understand this well. Here I know that the author is assuming that he tried to build xss payload, then the result may be like what he think instead of the reality. Therefore, What's phrase 'It would then be' mean? What's the meaning of word then here?

Improve this question
1
  • After I tried to encode the script in base 64 and insert it into the payload event, the script went along at that point (would then) get translated out of base 64 and on to running under the eval module.
    – Yosef Baskin
    Commented Jun 25, 2017 at 20:05

1 Answer 1

Reset to default
1

This is a kind of "future in the [hypothetical] past". It corresponds to "It will then be decoded" in the present.

So the writer is saying "If I had succeeded in ..., it would then ["next"] be decoded ... "

Improve this answer
3
  • The author might have phrased it more clearly as "It would then have been decoded..." to be hypothetical past.
    – Chemus
    Commented Jun 25, 2017 at 20:09
  • @Chemus: it could have "have been", but it doesn't need to. I don't fnd that any clearer.
    – Colin Fine
    Commented Jun 25, 2017 at 20:11
  • That's true, hence my phrasing as 'might have been...'
    – Chemus
    Commented Jun 25, 2017 at 20:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.