+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [XSS][Persistent] 4shared.com (/showthread.php?tid=2036282)
Pages: Pages
1
2
[XSS][Persistent] 4shared.com - Pillows - Dec 21, 2011
PHP Code
<?php
http://www.4shared.com/folder/Ppp265OC/_online.html
[edited]
It got me 1764705 points on RankMyHack which ed me to rank 13 on my first XSS report on the site and put me on the #1 rank for top hack.
* - ~!White!~ - Dec 21, 2011
Good job i didn't know that you can submit Persistent Xss vulns i would of done that.
Keep up the good work :)
* - Pillows - Dec 21, 2011
(Dec 21, 2011 11:48 PM)~!White!~ Wrote: Good job i didn't know that you can submit Persistent Xss vulns i would of done that.
Keep up the good work :)
Submit all google.com XSS vulns = profit$$$$
* - -DownFall - Dec 21, 2011
inb4 ZeroPwn posts his persistent FB find.
* - zer0pwn - Dec 21, 2011
Nice job!
Wow, I'm extremely impressed, I wouldn't have even thought of the file upload, :P.
Good job!
* - cheatson - Dec 22, 2011
(Dec 21, 2011 11:44 PM)ring0 ͟ Wrote:PHP Code
<?php
http://www.4shared.com/folder/Ppp265OC/_online.html
It's a persistent XSS which I used by uploading files with XSS syntaxes in them. (Yay mac for not filtering < and >)
It got me 1764705 points on RankMyHack which ed me to rank 13 on my first XSS report on the site and put me on the #1 rank for top hack.
Congratulations- I saw this trick before on file sharing sites but its cool to see it has more widely reaching implications especially on sites of that calliber! Congrats too on getting the number 1 hack on RMH!
* - whizzy - Dec 22, 2011
Thats an awesome hack. please throw some light on the same.
* - HaxOr❤ - Dec 22, 2011
This was discovered on MediaFire too.
Nothing new really.
* - Pillows - Dec 22, 2011
(Dec 22, 2011 12:22 PM)๖ۣۜΗ α x O r ♥ Wrote: This was discovered on MediaFire too.
Nothing new really.
Yeah that's how I got the idea too. It almost worked on mediafire as well until it filtered the <! and >.
* - RustyRose - Dec 22, 2011
YOU LEECHER, YOU DIDN'T DISCOVERED THIS SHIT.
IT IS ORIGINALLY DISCOVERED BY "CyanXSS"
* - sangar66 - Dec 22, 2011
Calm down, caps are not good... I don't know if they leeched, I personally haven't seen CyanXss's post, and you have no way of knowing who found it first....
Members like this are those who hurt HF's reputation....
* - Pillows - Dec 22, 2011
(Dec 22, 2011 07:13 PM)RustyRose Wrote: YOU LEECHER, YOU DIDN'T DISCOVERED THIS SHIT.
IT IS ORIGINALLY DISCOVERED BY "CyanXSS"
How did you find that name? I thought I removed that from there. By the way I used to use the name CyanXSS. This is proof:
[img]http://i.minus.com/isbuLClguLO30.png[/img]
Only reason why there is no @CyanXSS account is because I renamed it to the @ring0xss account.
If you still don't believe me...
http://rankmyhack.com/userview.php?user=CyanXSS
* - D@rKL0rd - Dec 26, 2011
yeh its cyanXSS aka ring0..
nice job...!!
* - The Ion - Dec 26, 2011
nice job dude keep up the good work
* - BradRDAnews420 - Jan 22, 2012
Nice one, when I noticed this I had to double check the legitimacy of it :P... Congrats on top hack, try and go for 1st place leaderboard now ;)
P.S not sure if you'd count 27days a grave-dig but lol w.e :3
-Brad