+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [XSS]4chan.org[XSS] (/showthread.php?tid=3772089)
Pages: Pages
1
2
* - Ryan - Sep 25, 2013
The above conversations were amusing.
Way to go, OP. Nice find!
* - harveyhf - Sep 25, 2013
(Sep 25, 2013 09:35 AM)Lozab Wrote: it's actually hell of a lot easier to find XSS with IE...For me at least.
what? How does the browser effect how easily it is to find XSS exploits....
* - Lozab - Sep 25, 2013
(Sep 25, 2013 09:23 PM)harveyhf Wrote: what? How does the browser effect how easily it is to find XSS exploits....
Well you're probably still haven't learned much about XSS filters, most people will tell you to use Firefox because it doesn't filter out XSS, that's not entirely true because Firefox filters some queries that are important, however IE if you disable XSS filters, there is more chances of you finding XSS, I can't really explain it because I'm on a phone atm, but my XSS on 4chan seems to be working on both browsers.
So I use IE so I don't miss any valuable XSS vulns.
* - cheatson - Sep 25, 2013
(Sep 25, 2013 09:23 PM)harveyhf Wrote: what? How does the browser effect how easily it is to find XSS exploits....
More than a few differences, although XSS vulns in IE aren't a catch-all, each of the browsers potentially can render DOM XSS differently so it is kinda contextual. The main difference in normal XSS scope are that Internet explorer allows in-style expression statements which can run javascript, <IE6 could bypass filters when character encoding was not specified in the HTTP header, and back-tick operators could be used in certain situations in place of quotation marks.
* - 3vilHacker - Sep 26, 2013
Um forget what I just said im tired....
* - ๖ۣۜAlexander - Sep 27, 2013
(Sep 25, 2013 09:27 AM)OhNoMoney Wrote: If it's not discovered how can you apply it?
Zero day simply means the Receiver of the attack had zero days to patch the vuln..
It's a rare exploit in other hands, and it's unknown by the system that it's being used.
LOLing at you. You're probably just quoting the wikipedia page of 0day, am I right?
![[Image: 4ByX7.png]](https://puu.sh/4ByX7.png)
Please just leave if you don't know shit and have to look it up on wikipedia.
* - B0$$ - Sep 27, 2013
Nice find OP !! and i totally have to agree had a good laugh !~! ;D
Spoiler (Click to View)