+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: XSS Tutorial - Cross Scripting Attacks (/showthread.php?tid=47009)
- KING-T - Feb 6, 2009
Nice tut. This will help many people out 👍
- FeAR Being - Feb 7, 2009
(Feb 6, 2009 03:07 PM)Galisss Wrote: you deserve to die...DOUBLE POSTERS DESERVE TO DIE !!!this tut is copied from zero thunder hacker ! n00b !
rolf gtfo my tutorial.And if someone copyed it was him, I posted this on evileXe while we were still in like nov 2008.
So gtfo.
(Feb 6, 2009 08:45 PM)ExPlOiT Wrote: Lol nice tut i read this on hbx keep it up.
Yo ExPl0iT.
Just so that noob up doesnt think about stuff, he saw this tut, posted by me!
- Judge Dredd - Feb 7, 2009
Ok, ok, enough with flaming.
- FeAR Being - Feb 7, 2009
(Feb 7, 2009 10:18 AM)Hanzo Wrote: Ok, ok, enough with flaming.
Agreed 😑
- titoscol - Feb 7, 2009
good turtorial thX :)
- mush - Feb 9, 2009
i fout site that vurnelable and then i did this:
<img src="yourevilpic.com">
but can i do that the picture stays thre and other people can see this?
- KING-T - Feb 9, 2009
(Feb 9, 2009 06:49 AM)mush Wrote: i fout site that vurnelable and then i did this:
<img src="yourevilpic.com">
but can i do that the picture stays thre and other people can see this?
Depends.. I ususally like to XSS Forums Then i put my command in the title so that it will always be there whenever someone clicks on that section.
- mush - Feb 9, 2009
thx but can you explain how i do this ?
- batfink - Feb 9, 2009
the cookie catcher bit is exactly the same to one i saw on youtube...as in you've pretty much just copied what they said and wrote it
and the defacement bit only works on the machine the xss was executed on..and is temporary
- adtechniques - Feb 9, 2009
I'll try and post test results for everyone. Thks man.
- FeAR Being - Feb 10, 2009
(Feb 9, 2009 07:25 AM)batfink Wrote: the cookie catcher bit is exactly the same to one i saw on youtube...as in you've pretty much just copied what they said and wrote it
and the defacement bit only works on the machine the xss was executed on..and is temporary
I just made the tutorial, I didint code it.
And your wrong about the imag xss btw.
- Nerv - Mar 7, 2009
man thanks
good work
i have been looking for a tutorial like this
- FeAR Being - Mar 17, 2009
I even enjoy writing this tutorials :P
- Dark0ne1 - Mar 17, 2009
So you can enter <script>alert("XSS");</script> anywhere and then just press enter? I tried in a login form at some forum and obviously it said like wrong password or something.
- FeAR Being - Mar 28, 2009
(Mar 17, 2009 11:52 AM)dark0ne Wrote: So you can enter <script>alert("XSS");</script> anywhere and then just press enter? I tried in a login form at some forum and obviously it said like wrong password or something.
No, it will only work if the site has this code on the source:
Something like:
Code
<?php
echo ("<img src=" . $_GET['a'] . "></img>");
?>