Gist 6b1a5d43e458a795e475b14a5d9dbeac

100%

Gist 6b1a5d43e458a795e475b14a5d9dbeac

✓ Published0🌍 Public

Last edited Oct 4, 2018

Created on Oct 4, 2018

This example demonstrates a malicious PHP file embedded within a GitHub gist, where an `echo` statement outputs `<h3>HACKED</h3>` to the page. The code uses the PHP `echo` language construct to directly inject HTML into the response, simulating a simple cross-site scripting or content injection attack. The gist syntax-highlights the PHP code, showing how a plain text file can carry executable server-side logic. The example highlights the security risk of trusting raw gist content, as the code appears as a static file but would execute if processed by a PHP-enabled server.

AI-generated description

Similar vizzes

Loading thumbnail…

Gist 055a86617685691db7632fcb10fb8bc8

This example demonstrates a simulated cross-site scripting (XSS) attack via remote file inclusion, visually rendering a PHP script’s output as an alert dialog that exposes `document.cookie`. The visualization uses a plain HTML page to embed the PHP snippet, with the code directly echoing a `<script>` tag that triggers the alert. It relies on the browser’s native JavaScript execution rather than external libraries, showing the raw mechanism of injecting client-side code through a server-side include. The rendering approach is minimal, presenting the source code and its resulting runtime behavior side by side.

PPeleke

78% match

Loading thumbnail…

Gist 6caf9fb33f0b7bf1fe0b594b403dc053

This example demonstrates a potential security exploit rather than a data visualization. The PHP code generates an HTML script tag that uses JavaScript to send the visitor’s cookies to a remote webhook URL via an img request. It relies on the `document.cookie` API to capture cookie data and the `document.write` method to inject the tracking pixel. The rendering approach is purely client-side, with no charting or visualization libraries involved. The piece highlights how insecure code can misuse basic web technologies for data exfiltration.

PPeleke

75% match

Loading thumbnail…

Gist 1f02b0833eba6f40ff53aff3d6e3a794

This example is a simple PHP script that demonstrates basic echo output. It assigns a multi-line HTML string containing an `<h1>` heading to a variable using the heredoc syntax, and then outputs it with the `echo` statement. The visualization shows the resulting rendered HTML page in the browser. The code relies on PHP's built-in echo construct and standard heredoc string handling rather than any external libraries or data sources.

PPeleke

70% match

Loading thumbnail…

Gist 6ed3f84640838d8320f6b209b1628e41

This example demonstrates a cross-site scripting (XSS) proof-of-concept that exfiltrates a visitor’s cookies. The code uses a raw JavaScript payload with `document.write` to inject an `<img>` tag, which fires a request to a user-supplied Ngrok URL, appending `document.cookie` as a query parameter. It shows a simple, direct attack vector for testing XSS vulnerabilities, relying on the browser’s automatic image request to send data to an external server. The visualization is the code itself, presented as a threat-modeling sample rather than a chart.

PPeleke

68% match

Loading thumbnail…

Here are some things you can do with Gists in GistBox.

This example demonstrates the versatility of Gists by showcasing a collection of code snippets, documentation, and a recipe. It displays a JavaScript console log, a Ruby quicksort implementation, a markdown file with keyboard shortcuts and a Clipper extension link, and a markdown recipe with ingredients and directions. The visualization uses the GistBox interface to organize these files, showing how the tool handles multiple file types, including code, documentation, and images, within a single gist. The data source is the GitHub Gist itself, presented as a static list of files without interactive features.

GGerHobbelt

59% match

Loading thumbnail…

Here are some things you can do with Gists in GistBox.

This example showcases the versatility of Gists as a code-storage and note-taking tool, presenting a mix of JavaScript, Ruby, and Markdown files. It first demonstrates reusable JavaScript for console logging, then a Ruby quicksort algorithm class, and finally Markdown documents for project documentation and a cheesecake recipe. The visualization highlights how code snippets and text can be organized together, with the recipe including an image and ingredient lists. The implementation relies on plain text files and code blocks, with no external libraries like d3 or Three.js; instead, it focuses on the raw content structure of Gists, sourced from GitHub’s gist system.

AAntonLecock

58% match

Loading thumbnail…

Here are some things you can do with Gists in GistBox.

GistBox demonstrates how Gists can organize reusable code, documentation, and personal content through a collection of annotated files. The example includes a JavaScript snippet logging the `window` object, a Ruby QuickSort implementation, a Markdown guide for keyboard shortcuts, and a cheesecake recipe. Each file uses plain-text formats or language-specific syntax, with Markdown structuring the documentation and recipe. No external libraries or APIs are involved; the visualization relies solely on the hierarchical display of Gist files and their metadata, sourced directly from GitHub’s Gist system.

JJaxonDvl

58% match

Loading thumbnail…

Here are some things you can do with Gists in GistBox.

This example demonstrates various uses for GitHub Gists within the GistBox interface, showcasing code reuse, algorithm storage, project documentation, and recipe tracking. The JavaScript file logs the window object, the Ruby file implements a Quicksort algorithm, and the Markdown files document keyboard shortcuts and a cheesecake recipe with ingredients and directions. The visualization organizes these heterogeneous snippets into a unified list, highlighting GistBox’s role as a repository for code, notes, and external content, with the Markdown files including links and images.

MMark-A-A

58% match