Skip to content

Instantly share code, notes, and snippets.

@MCOfficer

MCOfficer/plugins.json

Last active May 3, 2021 11:37
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save MCOfficer/214545deb68a05ee35827b28d846b189 to your computer and use it in GitHub Desktop.
Save MCOfficer/214545deb68a05ee35827b28d846b189 to your computer and use it in GitHub Desktop.
Download ZIP
trying to break the ES website plugin table
Raw
plugins.json
[
{
"name": "Test Plugin",
"authors": "MCOfficer",
"homepage": "\"><script>alert('xss')</script><\"",
"license": "Public Domain",
"version": "0",
"shortDescription": "<a href='https://httbin.org'>link</a> \"><SCRIPT>alert('XSS')</SCRIPT><\"",
"description": "",
"url": "",
"iconUrl": "&#34;><script>alert('xss')</script><&#34;",
"autoupdate": {
"type": "",
"url": "",
"iconUrl": ""
}
}
]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment