John Poulin forced-request

## server.js
/* Tell Node not to crash */
process.on('uncaughtException', function (err) {
    console.log('Caught exception: ', err);
});

## rails_dynamic_render_code_exec.rb
require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = ExcellentRanking
  @@trav_string = '%5c%2e%2e%2f'

  include Msf::Exploit::Remote::HttpClient

  def initialize(info = {})
    super(update_info(info,

## json_encode-xss-prevention.php
<html>
<body>
<script>
    var a = “prefix” + <?= json_encode($_GET['p']); ?> + “suffix”;
</script>
</body>
</html>

## htmlentities_javascript.php
<html>
<body>
<script>
    var a = '<?= htmlentities($_GET['p']); ?>';
</script>
</body>
</html>

## mitigated_dynamic_render.rb
def show
  template = params[:id]
  d = Dir[“myfolder/*.erb]

  if d.include?(“myfolder/#{template}.erb”)
    render "myfolder/#{template}"
  else
    # throw exception or 404
  end
end

## mitigated_dynamic_render.rb
def show
  template = params[:id]

  valid_templates = {
    "dashboard" => "dashboard",
    "profile"   => "profile",
    "deals"   => "deals"
  }

  if valid_templates.include?(template)

## dynamic_render.rb
def show
  render params[:template]
end

## gist:7ff7fe31632c23d47f6c
wp = require("webpage").create();
wp.onAlert = function(text) {
	console.log("Alerted: " + text);
};

wp.content = "<html><body>Hello: <iframe src='f' onerror='prompt(299792458)'></iframe><script>window.alert(\"Normal Func\")</script></body></html>";
wp.evaluate(function (wp) {

}, wp);

## attack.rb
def Attack
end

## main.rb
require 'lib/request'
puts "hi"
	/* Tell Node not to crash */
	process.on('uncaughtException', function (err) {
	console.log('Caught exception: ', err);
	});
	require 'msf/core'

	class Metasploit3 < Msf::Exploit::Remote
	Rank = ExcellentRanking
	@@trav_string = '%5c%2e%2e%2f'

	include Msf::Exploit::Remote::HttpClient

	def initialize(info = {})
	super(update_info(info,
	<html>
	<body>
	<script>
	var a = “prefix” + <?= json_encode($_GET['p']); ?> + “suffix”;
	</script>
	</body>
	</html>
	def show
	template = params[:id]
	d = Dir[“myfolder/*.erb]

	if d.include?(“myfolder/#{template}.erb”)
	render "myfolder/#{template}"
	else
	# throw exception or 404
	end
	end
	def show
	template = params[:id]

	valid_templates = {
	"dashboard" => "dashboard",
	"profile" => "profile",
	"deals" => "deals"
	}

	if valid_templates.include?(template)
	wp = require("webpage").create();
	wp.onAlert = function(text) {
	console.log("Alerted: " + text);
	};

	wp.content = "<html><body>Hello: <iframe src='f' onerror='prompt(299792458)'></iframe><script>window.alert(\"Normal Func\")</script></body></html>";
	wp.evaluate(function (wp) {

	}, wp);