+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [#OP XSS] VOICE OF GREY HAT[TEAMHAV0K] (/showthread.php?tid=2132047)
Pages: Pages
1
2
[#OP XSS] VOICE OF GREY HAT[TEAMHAV0K] - orunu - Jan 21, 2012
welp its happened TeamHav0k has been officially published! VOGH published an article i've wrote up for the team containing all of the recent XSS finds of the team :).
VOGH:
http://www.voiceofgreyhat.com/2012/01/huffingtonpost-ea-ign-nytimes-many.html
* - Best Teemo NA - Jan 21, 2012
Awesomeness bro more #OPs to come in near future.
* - SIM-974023 - Jan 21, 2012
Nice coverage.
But I think it is over-exaggerated on the vulnerable parts.
* - Best Teemo NA - Jan 21, 2012
(Jan 21, 2012 10:08 AM)DaleANON Wrote: Nice coverage.
But I think it is over-exaggerated on the vulnerable parts.
No not really those are trusted site that most people know send them to a payload link and they would have no clue and if you think all you can do with those is an alertbox please go read up on Cross Site Scripting attack methods before you try to trash our finished OP cheers
* - orunu - Jan 21, 2012
(Jan 21, 2012 10:08 AM)DaleANON Wrote: Nice coverage.
But I think it is over-exaggerated on the vulnerable parts.
just because they are not persistent doesn't mean they are useless or anything, they can still be used in conjuncture with a XSS Tunnel&Shell or a Cookie Stealer. If you understood the dangers of XSS you would no that even a non-peristent in the right hands can turn very deadly.
* - Hooded Robin - Jan 21, 2012
Good job guys! If you dont think XSS is a big deal then check out this video I made just to give you an idea: https://hackforums.net/showthread.php?tid=1853635
XSS to Meterpreter Shell against fully patched Windows 7 box :p
* - agentannon - Jan 21, 2012
They exaggerated a bit, but still, great story.
* - orunu - Jan 21, 2012
Thanks everyone, but how exactly did they exaggerate? I dont see how they exaggerated our finds in any way.
* - 4rch1t3ct - Feb 1, 2012
I am back guys.. when you get on msg me I have something we should discuss.
* - kobez - Feb 1, 2012
Congrats Team Hav0k, that's a major acheivement :)
* - orunu - Feb 1, 2012
(Feb 1, 2012 08:21 AM)4rch1t3ct Wrote: I am back guys.. when you get on msg me I have something we should discuss.
do u have any news on inertia? havnt heard a word from him since the day both of u vanished into thin air.
* - Best Teemo NA - Feb 1, 2012
(Feb 1, 2012 09:06 AM)kobez Wrote: Congrats Team Hav0k, that's a major acheivement :)
lol kobez we already had op xss 2.0 you be late(:
* - kobez - Feb 1, 2012
(Feb 1, 2012 07:15 PM)๖ۣۜEchelon Wrote: lol kobez we already had op xss 2.0 you be late(:
I saw it on ehn broski 😈😈
seen the progress of ma shell? :D
* - Best Teemo NA - Feb 1, 2012
(Feb 1, 2012 07:18 PM)kobez Wrote: I saw it on ehn broski 😈😈
seen the progress of ma shell? :D
yesh i have its looking quite nice.
* - kobez - Feb 1, 2012
(Feb 1, 2012 07:25 PM)๖ۣۜEchelon Wrote: yesh i have its looking quite nice.
Got heaps of functions working now :D
going to add a login section to protect shell ;)