+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [XSS]4chan.org[XSS] (/showthread.php?tid=3772089)
Pages: Pages
1
2
[XSS]4chan.org[XSS] - Lozab - Sep 25, 2013
Method: Post XSS
Spoiler (Click to View)
![[Image: 1lTty0u.jpg]](https://i.imgur.com/1lTty0u.jpg)
Not many people have found vulns in 4chan so this is a great little achievement for me. lol
and also for those who will say this is probably fake, the page isn't fully loaded.
if you know 4chan, it'll ask you to type out a captcha after the message that was shown in the screen shot.
Anyways Thoughts?
* - Night Baron - Sep 25, 2013
If it is persistent one, then it is very useful >:)
(evil laugh)
Well, congrats! :D
* - Lil Benadryl - Sep 25, 2013
How the hell did you get so good at XSS? I need to learn it, but I have been procrastinating :/. Anyways nice find 🤝!
* - frictionless - Sep 25, 2013
he blacked out half of the link to hide the fact that it is nothing more than a self xss
* - Lozab - Sep 25, 2013
(Sep 25, 2013 07:35 AM)frictionless Wrote: he blacked out half of the link to hide the fact that it is nothing more than a self xss
Are you mentally retarded Mr.Sherlock? I said its a post XSS.
and I obviously blacked out the link because I'd rather keep it as a 0day than give it out to some idiot and probably will take the credits for himself.
Hell even when I click on "OK"
This shit shows up
![[Image: VZ4s6hz.png]](https://i.imgur.com/VZ4s6hz.png)
* - frictionless - Sep 25, 2013
(Sep 25, 2013 08:20 AM)Lozab Wrote: Are you mentally retarded Mr.Sherlock? I said its a post XSS.
and I obviously blacked out the link because I'd rather keep it as a 0day than give it out to some idiot and probably will take the credits for himself.
Hell even when I click on "OK"
This shit shows up
xss != 0day.
do you feel accomplished with yourself for earning your first skidmark
* - Lozab - Sep 25, 2013
(Sep 25, 2013 08:58 AM)frictionless Wrote: xss != 0day.
do you feel accomplished with yourself for earning your first skidmark
Actually, lots of people call it a 0day, you're just little noob aren't you? :)
Seriously if you're gonna flame, just get off this thread.
* - Rayquaza™ - Sep 25, 2013
(Sep 25, 2013 08:58 AM)frictionless Wrote: xss != 0day.
do you feel accomplished with yourself for earning your first skidmark
A 0DAY is when it hasn't been discovered you moron.
* - OhNoMoney - Sep 25, 2013
(Sep 25, 2013 09:24 AM)Devіl Wrote: A 0DAY is when it hasn't been discovered you moron.
If it's not discovered how can you apply it?
Zero day simply means the Receiver of the attack had zero days to patch the vuln..
It's a rare exploit in other hands, and it's unknown by the system that it's being used.
* - Lozab - Sep 25, 2013
(Sep 25, 2013 09:27 AM)OhNoMoney Wrote: If it's not discovered how can you apply it?
Zero day simply means the Receiver of the attack had zero days to patch the vuln..
It's a rare exploit in other hands, and it's unknown by the system that it's being used.
Eh? 0day means that has not been released or known about by the general public.
* - MaXoNe - Sep 25, 2013
I thought IE users dies with dinosaurs.
* - Lozab - Sep 25, 2013
(Sep 25, 2013 09:32 AM)MaXoNe Wrote: I thought IE users dies with dinosaurs.
it's actually hell of a lot easier to find XSS with IE...For me at least.
* - MaXoNe - Sep 25, 2013
Use Owasp Mantra , it's like Mozilla on steroids :)
* - Mario - Sep 25, 2013
Anyone calling this is 0day is retarded. Plain and simple
Good find OP
* - Corwin - Sep 25, 2013
Nice find, OP.
Some of the people in here need to learn their interwebsss.