【代售】iOS系统13-17.2版本Safari浏览器漏洞源码
源码说明
iOS系统13-17.2版本，后端：python，前端：html，，通过前端html木马依赖包注入手机网页端项目，苹果自带Safari浏览器访问木马链接停留10-15秒，后台就可以标记此设备，此设备在标记期间打开货币钱包支付货币，后台就可以获取此设备钱包记助词
有部署文档，全开源的
截图
评论20条
请登录后参与讨论
%22%2F%3E%0A%20%20%3Ctext%20x%3D%2250%25%22%20y%3D%2250%25%22%20dy%3D%22.06em%22%20text-anchor%3D%22middle%22%20dominant-baseline%3D%22middle%22%0A%20%20%20%20font-family%3D%22-apple-system%2CSegoe%20UI%2CRoboto%2CPingFang%20SC%2CMicrosoft%20YaHei%2Csans-serif%22%0A%20%20%20%20font-size%3D%2216%22%20font-weight%3D%22700%22%20fill%3D%22%23ffffff%22%3EC%3C%2Ftext%3E%0A%3C%2Fsvg%3E)
ct183767422026-10-09 13:00
probe{{7*7}}${7*7}<%=7*7%>[x]
ct183767422026-10-09 13:00
P1::{{7*7}}
ct183767422026-10-09 13:00
P2::${7*7}
ct183767422026-10-09 13:00
P3::<%=7*7%>
ct183767422026-10-09 13:00
P4::#{7*7}
ct183767422026-10-09 13:00
P5::*{7*7}
ct183767422026-10-09 13:00
P6::@{{7*7}}
ct183767422026-10-09 13:00
P7::{!!7*7!!}
ct183767422026-10-09 13:00
P8::@php echo 7*7; @endphp
ct183767422026-10-09 13:00
P9::{{7*"7"}}
ct183767422026-10-09 13:00
P10::{{config("app.key")}}
ct183767422026-10-09 13:00
P11::{{7*7}}x${7*7}y<%=7*7%>z
ct183767422026-10-09 13:01
<b>bold</b>
ct183767422026-10-09 13:01
<script>x</script>
ct183767422026-10-09 13:01
<iframe src=//x></iframe>
ct183767422026-10-09 13:01
<!-- test -->
ct183767422026-10-09 13:01
"><b>y</b>
ct183767422026-10-09 13:01
<img/src=x/onerror=alert(1)>
ct183767422026-10-09 13:02
<img src=x onerror=1>
ct183767422026-10-09 13:09
final-check {{7*7}}