react

从 React 内部转储数据 这个工具是一个为 Tampermonkey 编写的快速而粗糙的用户脚本，它会深入任何 React 页面若干层，并搜索用户提供的一个或多个短语。 该工具可以让你轻松地在 DOM 中找到 React 附加大量 JSON 数据的位置。 手动查找这些位置可能非常耗时，因为数据的存储和传递方式在很大程度上取决于开发者、React 的版本以及特定网站的复杂性。 这个用户脚本旨在让这一过程变得容易得多。 下面是该脚本实际使用时的视频。 关于这项工作如何以及为何进行的更多背景信息，请参阅本仓库中其他位置的同名教程。 安装 从本仓库复制用户脚本，并按照 Tampermonke...

CVE-2007-6640

Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify the configuration, or send an HTTP request via the 1 GMaddStyle, 2 GMlog, 3 GMopenInTab, 4 GMsetValue, 5 GMgetValue, o...

Design/Logic Flaw

Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify the configuration, or send an HTTP request via the 1 GMaddStyle, 2 GMlog, 3 GMopenInTab, 4 GMsetValue, 5 GMgetValue, o...

CVE-2007-6640

Creammonkey (0.9–1.1) and GreaseKit (1.2–1.3) expose dangerous user-scripting APIs (GM_addStyle, GM_log, GM_openInTab, GM_setValue, GM_getValue, GM_xmlhttpRequest) to web pages, allowing a remote attacker to read/modify configuration or trigger HTTP requests from a page hosting a userscript. The ...

JVN#33044255 GreaseKit and Creammonkey allows execution of userscript functions

GreaseKit and Creammonkey are plugins that enable user scripting to Safari and other Apple Webkit applications, and they provide APIs callable only from userscripts. GreaseKit and Creammonkey are vulnerable in allowing APIs called from a web page. Impact When a user views a specially crafted web...