search

tr4l / iframeBusterXSS

Check for know iframeBuster XSS
10 stars 6 forks source link

[Help] Atlas & doubleclick #2

Open random-robbie opened 5 years ago

random-robbie commented 5 years ago

Hey,

Do you have any examples for the atlas and double click pocs at all?

tr4l commented 5 years ago

The only Iframe I found for atlas only contains a script: http://rmd.atdmt.com/tl/newIframeScript.js The domain name doesn't resolve on my side, and is hosted on http. (that means the iframe should also be in http to work with modern browser)

For double click, they are several iframe

I played a lot with the DARTIframe.html one, and I think this may be possible to make a race XSS. (some more tips on https://seclists.org/fulldisclosure/2019/Jun/48 ) I haven't look at the other one.

random-robbie commented 5 years ago

Thank you very much for that! 👍 ill continue to look