3 ms·

How does this work?

• JamieH 12y ago
  The TXT record isn't being sanitized so it just echos out the script tag which then loads the JS file.
• er0k 12y ago
  jamiehankins.co.uk. 33 IN TXT "<script src='//peniscorp.com/topkek.js'></script>" jamiehankins.co.uk. 33 IN TXT "<iframe width='420' height='315' src='//www.youtube.com/embed/dQw4w9WgXcQ?autoplay=0' frameborder='0' allowfullscreen></iframe>"
• deleted 12y ago
  [deleted]
• jb55 12y ago
  Use dig: $ dig txt jamiehankins.co.uk https://gist.github.com/440ef567e4bcc8f7ce34 https://gist.github.com/440ef567e4bcc8f7ce34