u/wesmafree

I am doing a pentest and I have a iframe reflection but CSP will only allowme to fetch sites from assets.adobedtm.com. I know if im able to get a file that does a simple alert or a <h1> or something I will have an XSS but i cant create files or anaything becouse i dont have an account in Adobe Cloud and i cant create one.

I hace tried searching everywhere but i have been unable to find any PoCs

Any help? Thanksss :)))

EDIT: it seems if i want to create one i need access to Adobe Experience Platform

I am doing a pentest and I have a iframe reflection but CSP will only allowme to fetch sites from assets.adobedtm.com. I know if im able to get a file that does a simple alert or a <h1> or something I will have an XSS but i cant create files or anaything becouse i dont have an account in Adobe Cloud and i cant create one.

I hace tried searching everywhere but i have been unable to find any PoCs

Any help? Thanksss :)))