CVE-2024-4367 PoC — Mozilla Firefox 安全漏洞

Description

This Proof of Concept (PoC) demonstrates the exploitation of the CVE-2024-4367 vulnerability, which involves Cross-Site Scripting (XSS) attacks.

Readme

# CVE-2024-4367-PoC
This Proof of Concept (PoC) demonstrates the exploitation of the CVE-2024-4367 vulnerability, which involves Cross-Site Scripting (XSS) attacks.


# Features
This PoC collects and displays the following types of information:

## 1.	General Information:
-	Domain
-	Title
-	Current URL
-	Referrer URL
-	Cookies associated with the domain

## 2.	Browser Environment Information:
-	LocalStorage and SessionStorage data
-	User Agent
-	Screen resolution
-	Platform (Operating System)

## 3.	Web Features:
-	Cookies enabled/disabled
- Do Not Track status
-	Max touch points (e.g., for mobile devices)
-	Connection type (e.g., 4G, WiFi)
-	Battery level (if available)


## 4.	Screen Information:
-	Screen resolution
-	Color depth
-	Available width and height
-	Orientation of the screen

## 5.	Geolocation and Performance:
-	Geolocation availability
-	Device memory (if available)
-	Hardware concurrency (number of processor cores)

## 6.	WebRTC and Plugins:
-	Detection of WebRTC IP leakage
-	Installed browser plugins
-	Available languages for the browser



# sample of PoC

![PoC 1](https://github.com/inpentest/CVE-2024-4367-PoC/blob/main/sample/poc-1.png)

![PoC 2](https://github.com/inpentest/CVE-2024-4367-PoC/blob/main/sample/poc-2.png)

![PoC 3](https://github.com/inpentest/CVE-2024-4367-PoC/blob/main/sample/poc-3.png)

![PoC 4](https://github.com/inpentest/CVE-2024-4367-PoC/blob/main/sample/poc-4.png)

![PoC 5](https://github.com/inpentest/CVE-2024-4367-PoC/blob/main/sample/poc-5.png)

![PoC 6](https://github.com/inpentest/CVE-2024-4367-PoC/blob/main/sample/poc-6.png)

File Snapshot

Remarks