🚨 GitHub 监控消息提醒
🚨 发现关键词： #XSS #Reflected
📦 项目名称： CSRF-to-XSS-to-Cookie-Leak-pwn.college-pwnpost-
👤 项目作者： moskovskymike-bughunter
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-10-29 10:54:38
📝 项目描述：
🔗 点击访问项目地址
🚨 发现关键词： #XSS #Reflected
📦 项目名称： CSRF-to-XSS-to-Cookie-Leak-pwn.college-pwnpost-
👤 项目作者： moskovskymike-bughunter
🛠 开发语言： Unknown
⭐ Star数量： 0 | 🍴 Fork数量： 0
📅 更新时间： 2026-10-29 10:54:38
📝 项目描述：
The "pwnpost" Flask application has a Reflected XSS vulnerability in the /ephemeral endpoint. Because the application lacks CSRF protection, an attacker can force an authenticated admin bot to visit a malicious page. This page redirects the bot to the vulnerable endpoint, which executes JavaScript to steal the admin's auth cookie.🔗 点击访问项目地址
GitHub
moskovskymike-bughunter/CSRF-to-XSS-to-Cookie-Leak-pwn.college-pwnpost-
The "pwnpost" Flask application has a Reflected XSS vulnerability in the /ephemeral endpoint. Because the application lacks CSRF protection, an attacker can force an authenticated...
