Here's an example application that uses the pattern detailed below: https://github.com/tantastik/talent-curator
This document is an attempt to describe the first step of a large project structure with flask and some basic modules:
Please feel free to fix and add your own tips.
| /* Remote File Include with HTML TAGS via XSS.Cx */ | |
| /* INCLUDE:URL http://xss.cx/examples/ultra-low-hanging-fruit/no-experience-required-javascript-injection-signatures-only-fools-dont-use.txt */ | |
| /* INCLUDE:URL http://xss.cx/examples/ultra-low-hanging-fruit/no-experience-required-http-header-injection-signatures-only-fools-dont-use.txt */ | |
| /* INCLUDE:URL http://xss.cx/examples/ultra-low-hanging-fruit/no-experience-required-css-injection-signatures-only-fools-dont-use.txt */ | |
| /* Updated September 29, 2014 */ | |
| /* RFI START */ | |
| <img language=vbs src=<b onerror=alert#1/1#> | |
| <isindex action="javas	cript:alert(1)" type=image> | |
| "]<img src=1 onerror=alert(1)> | |
| <input/type="image"/value=""`<span/onmouseover='confirm(1)'>X`</span> |
| import requests | |
| import json | |
| import os | |
| import youtube_dl | |
| PANOPTO_BASE = "https://cardiff.cloud.panopto.eu" | |
| """ | |
| Place the value of your .ASPXAUTH token in the following variable | |
| """ |
