this? self? window? parent? Likely js so look for variable names or objects that can be walked/reflected. Quite possibly it's being called via var.something() or an eval so maybe also try escaping via ', " or )
So....yarh, there is this hidden preauth console functionality in the sandboxed browser used for "i forgot my pin". Anyone knows some cmds to give it?pic.twitter.com/Kpg4nkn01b
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
document.location='file:///c:/WINDOWS/system32/drivers/etc/hosts'
-
@jonasLyk give me some feedback in case it works. I'm curious
End of conversation
New conversation -
-
-
are you limited to uppercase?
-
i have no limits at all
- Show replies
New conversation -
-
-
does it tab-complete?
-
if it did this tweet would not exist
End of conversation
New conversation -
-
-
Tried HELP?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Try parsing WFUZZ parameters and filter on non-standard status codeshttps://github.com/xmendez/wfuzz
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
I'd see if basic functionality works (i.e. 1, 'test'), then try location='//microsoft.com' and open('/'). If you can open a new window that'd be interesting. Could try protocol handlers?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.