Webapp-Exploit-Payloads icon indicating copy to clipboard operation
Webapp-Exploit-Payloads copied to clipboard

JavaScript error on crossdomain payload: statusurl is not defined

Open 7a opened this issue 12 years ago • 0 comments

When I run the following: ./bin/genpayload.py -p wordpress/newadmin -t swf -P usernewpage=http://demosite.com/wordpress-3.2.1/wp-admin/user-new.php -o /var/www/wordpress_newadmin/

And then browse to the generated payload: http://evilsite.com/wordpress_newadmin/index.html

I get the following JavaScript error message in the console: ReferenceError: statusurl is not defined if (statusurl.length > 0)

The bug seems to be in common.js:

function notify(status) { if (statusurl.length > 0) { nstatusurl = statusurl + '?status=' + escape(status); $.getScript(nstatusurl); } };

7a avatar Apr 23 '13 20:04 7a