Skip to content

Instantly share code, notes, and snippets.

<title>Login Frame</title>
<script type="text/JavaScript">
const allowed = [
window.location.host, "localhost"
];
window.addEventListener('message', (event) => {
const anchor = document.createElement('a');
anchor.href = event.data.domain;
@PinkDraconian
PinkDraconian / cli.php
Created February 28, 2022 12:57
Can you spot the vulnerability?
<?php
if (!isset($_SERVER['argc']) || $_SERVER['argc'] < 1) {
die("Usage: cli <action> <options>");
}
$argc = $_SERVER['argc'];
$argv = $_SERVER['argv'];
switch ($argv[1]) {
case "ls":
echo "Listing directory";