Gist 6caf9fb33f0b7bf1fe0b594b403dc053

100%

Gist 6caf9fb33f0b7bf1fe0b594b403dc053

✓ Published0🌍 Public

Last edited Jul 2, 2019

Created on Jul 2, 2019

This example demonstrates a potential security exploit rather than a data visualization. The PHP code generates an HTML script tag that uses JavaScript to send the visitor’s cookies to a remote webhook URL via an img request. It relies on the `document.cookie` API to capture cookie data and the `document.write` method to inject the tracking pixel. The rendering approach is purely client-side, with no charting or visualization libraries involved. The piece highlights how insecure code can misuse basic web technologies for data exfiltration.

AI-generated description

Similar vizzes

Loading thumbnail…

Gist 6ed3f84640838d8320f6b209b1628e41

This example demonstrates a cross-site scripting (XSS) proof-of-concept that exfiltrates a visitor’s cookies. The code uses a raw JavaScript payload with `document.write` to inject an `<img>` tag, which fires a request to a user-supplied Ngrok URL, appending `document.cookie` as a query parameter. It shows a simple, direct attack vector for testing XSS vulnerabilities, relying on the browser’s automatic image request to send data to an external server. The visualization is the code itself, presented as a threat-modeling sample rather than a chart.

PPeleke

84% match

Loading thumbnail…

Gist 055a86617685691db7632fcb10fb8bc8

This example demonstrates a simulated cross-site scripting (XSS) attack via remote file inclusion, visually rendering a PHP script’s output as an alert dialog that exposes `document.cookie`. The visualization uses a plain HTML page to embed the PHP snippet, with the code directly echoing a `<script>` tag that triggers the alert. It relies on the browser’s native JavaScript execution rather than external libraries, showing the raw mechanism of injecting client-side code through a server-side include. The rendering approach is minimal, presenting the source code and its resulting runtime behavior side by side.

PPeleke

81% match

Loading thumbnail…

Gist 6b1a5d43e458a795e475b14a5d9dbeac

This example demonstrates a malicious PHP file embedded within a GitHub gist, where an `echo` statement outputs `<h3>HACKED</h3>` to the page. The code uses the PHP `echo` language construct to directly inject HTML into the response, simulating a simple cross-site scripting or content injection attack. The gist syntax-highlights the PHP code, showing how a plain text file can carry executable server-side logic. The example highlights the security risk of trusting raw gist content, as the code appears as a static file but would execute if processed by a PHP-enabled server.

PPeleke

75% match

Loading thumbnail…

Gist a0b52845de084cc3c135d878987abc87

This example demonstrates a Python script that logs into the Premier League fantasy football website and captures authentication cookies. It shows the redirect chain and cookie-handling process during login. The code uses the `requests` library to post login credentials and manually follows HTTP redirects while printing cookie names and values at each step. It relies on credentials imported from a `constants` module and includes a hardcoded `datadome` cookie from a prior session. The visualization is a code-based demonstration of session management, not a graphical output.

CConorAspell

60% match

Loading thumbnail…

Gist 50f16a9f81d9c88a6a48

This example demonstrates a cookie-based voting system that tracks whether a user has visited a page or submitted a vote. On page load, it checks for an existing "username" cookie; if none exists, it prompts for a name and stores it for 30 days. The code uses the jQuery Cookie plugin to set a per-page cookie after voting, triggering a welcome message on first visit or an already-visited alert afterward. It also includes native JavaScript functions (`setCookie`, `getCookie`, `checkCookie`) for manual cookie management, relying on `document.cookie` and `toGMTString` for expiration handling.

LLayne Smith

59% match

Loading thumbnail…

Gist 940d9e28b4c94f7fea376c678e767261

This visualization shows a WordPress maintenance-mode message displayed as a stark red alert, blocking site access for unauthorized users. It renders a static HTML page with inline CSS styling via a PHP function, rather than using a JavaScript visualization library. The code checks user capabilities and login status with `current_user_can` and `is_user_logged_in`, then outputs the message using `wp_die` hooked into `get_header`. No data source or rendering framework is involved, as the example relies purely on server-side PHP and browser-rendered HTML.

KKopylovVitalik

58% match

Loading thumbnail…

Gist 2d272134b57b02eb8cdd0c5904249591

This example tests the archival fidelity of a web page by loading a series of images and scripts that mimic dynamic behavior, including DOM manipulation, AJAX requests, and delayed updates. It uses JavaScript’s `XMLHttpRequest` to fetch remote images and replaces them via base64 data URLs, while `setTimeout` and scroll events trigger asynchronous content changes. The page is rendered within an iframe by the pywb web archiving tool, with a banner and rewrite layer applied. The visualization demonstrates how archived sites handle live interactions and resource loading over time.

NN0taN3rd

58% match

Loading thumbnail…

Gist 154614

This example demonstrates how to build a dynamic, animated data visualization using the Firebug debugger service. The code, written in JavaScript, initializes components through the XPCOM interface and uses the jsdIDebuggerService to interact with JavaScript execution. It processes source code by matching patterns with regular expressions to identify functions and URLs. The visualization uses an animation rendering approach, driven by the underlying Firebug runtime environment, to explore and display code structures in a dynamic way. The data source is the JavaScript files being analyzed for function names and location details.

CCaged

58% match