Payload Templates (HTML Smuggling)

t94j0 / satellite

easy-to-use payload hosting

MIT License

263 stars 34 forks source link

Payload Templates (HTML Smuggling) #15

Open t94j0 opened 5 years ago

t94j0 commented 5 years ago

Serve a site with a template and a target. The template should have a {{ .Payload }} in it. That template will be populated with the raw payload or payload path depending on if you specify template_path or template_inject which are demo'ed below.

template_path:
  target: <fullpath>
  payload: <fullpath>

template_inject:
  target: <fullpath>
  payload: <fullpath>

This feature will be good for JS download cradles

t94j0 commented 5 years ago

From @andrewchiles on #18 https://outflank.nl/blog/2018/08/14/html-smuggling-explained/ https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2017/august/smuggling-hta-files-in-internet-exploreredge/