Hack Forums
[XSS] Tdc.dk Non-persistence, Large Mobile company! - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [XSS] Tdc.dk Non-persistence, Large Mobile company! (/showthread.php?tid=2393309)

[XSS] Tdc.dk Non-persistence, Large Mobile company! - Susp3cT - Apr 11, 2012

~ XSS non-persistence Attack Vector ~
By Susp3cT


I enumerated & exposed security flaw in a big danish mobile company.

Shoutouts: Team Intra, The Unknowns, Phiz0 for his returning!
Muchos love for you guys! <3

Code
[x]Target: http://www.tdc.dk
[x]Security flaw: XSS non-persistence
[x]PoC: http://desmond.imageshack.us/Himg638/scaled.php?server=638&filename=xsstdc.png&res=landing

[img]http://desmond.imageshack.us/Himg638/scaled.php?server=638&filename=xsstdc.png&res=landing[/img]

Out & Over!

* - Ultimatum™ - Apr 11, 2012

This is easy:

[Image: I2ZTO.png]

* - Susp3cT - Apr 11, 2012

Yeah it might be, but I was the first one to discover it ...
You can't catch what you can't see..

Over & Out

* - Narraz - Apr 11, 2012

I know that site too. It was easy.

[Image: k1qKO.png]

Thaks for the share.