+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Deface] LikeViews.com/(youtube.php,google.php,facebook.php) [XSS] (/showthread.php?tid=1823656)
[Deface] LikeViews.com/(youtube.php,google.php,facebook.php) [XSS] - _DeNy - Oct 15, 2011
http://www.likeviews.com/facebook.php
http://www.likeviews.com/youtube.php
http://www.likeviews.com/google.php
You can only see it if you have an account on likeviews.net.
I made the deface in about 5 minutes, so forgive me for it being a bit of a fail.
(Being a bitch to show, if it doesn't show up, let me know.)
October 09, 2011 - Webmaster contacted - No Response
October 15, 2011 - Website defaced and method published.
October 15, 2011 - Webmaster responded - Offered pay to find further exploits and claimed to have fixed the previous XSS.
October 16, 2011 - Website defaced using the same method on the same pages.
* - bckslsh - Oct 15, 2011
It isn't showing up for me, bro.
:\
* - _DeNy - Oct 16, 2011
Oh look, they fixed it and I did it again. :O
* - Davidz123 - Oct 16, 2011
My cousin was on likeviews today at my house and saw this.
I clapped and laughed.
* - vincentbelkin - Oct 16, 2011
Lol one member from HF owns the site. I remember him posting it.
* - Techie - Oct 16, 2011
Oh. We should be logined it? Is it?
* - _DeNy - Oct 16, 2011
(Oct 16, 2011 05:50 AM)Ƭє¢ɦɨɇ Wrote: Oh. We should be logined it? Is it?
Yes, you have to be logged in to view it.
(Oct 16, 2011 04:59 AM)Davidz123 Wrote: My cousin was on likeviews today at my house and saw this.Lol, well thank you for the clapping. :)
I clapped and laughed.
(Oct 16, 2011 05:15 AM)vincentbelkin Wrote: Lol one member from HF owns the site. I remember him posting it.
If I knew who then I would have contacted them on here instead of email... But webmasters should always check their emails.... :)
* - Dorsch - Oct 22, 2011
Lol thanks for letting me know to fix it.
You can still do this to like 90% of the other similar websites.
* - Natalie Portman - Oct 22, 2011
Hey guys, I was wondering how else you can hack a site other than SQLi and XSS??? For example, a site like this:
http://www.miraedwardsdesign.com.au/
Thanks!