Hijacking Hi5 profiles

[RedJoker]

Before you start, you need to have these things ready:

1.] Firefox

2.] ANEC Plugin

3.] Cookie Logger [ use this ]

4.] Hi5 Account [ get one here ]

Let's start.

First you need to make your XSS code ready. Then login into your hi5 account and go to Messages. Click on New Message. Then choose the victim from your Friend List. Choose any attractive subject that will make the victim open the message, and in the message, insert your XSS code. After you finish, click on Send.

If the victim opened your message, you will receive his cookies by e-mail. Take your victims cookies and replace them with your cookies by using ANEC Plugin. After you finish replacing them with your cookies, go to Hi5's Homepage and have fun ;D.

One of the problems that might happen is that the cookies session might expire, and you won't be able to hijack his account.

Tested and worked on: 20-July-2006   

God Bless Arabs.  ;D ;D

[DJAx3L]

da trebuia sa bagi si credits  .. si .. nu mai merge treaba de ceva vreme din`ainte de 20 iulie

[PumaS]

Eh interesanta chestie oricum pakat ca nu mai merge