Hack Forums
[XSS CHALLENGE]www.blogs.nasa.gov[XSS CHALLENGE] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [XSS CHALLENGE]www.blogs.nasa.gov[XSS CHALLENGE] (/showthread.php?tid=3962675)

Pages: Pages 1 2 3

[XSS CHALLENGE]www.blogs.nasa.gov[XSS CHALLENGE] - Hexag0ne - Dec 30, 2013

www.blogs.nasa.gov
[Image: c3deffcdc3.png]
Attack, gentlemen. ^^
EDIT: Okay.. wow. I didnt expect no one would be able to do it o-o

* - dabox - Dec 30, 2013

this is old man but nice found :D keep... <3

* - Krypto. - Dec 30, 2013

Making us hunt down the url isnt cool though... http://blogs.nasa.gov/ivv/photos/?locale=en_US&wppa-album=1&wppa-slide&wppa-occur=1

The plugin turn out to also be vuln to SQL Injection http://exploitsdownload.com/search/Word%20Press%203.4.1/26 who knew?

* - Hexag0ne - Dec 30, 2013

Lol, that awkward moment when you say you know it, and you dont post pictures.

* - Krypto. - Dec 30, 2013

I actually couldnt find the vuln, but dabox says he did. good find Hexag0ne

* - Hexag0ne - Dec 30, 2013

Haha, thanks. If you solve it, post pictures guys x.x

* - Sandikaaa - Dec 30, 2013

Obicham ta hex :*

Solved

[Image: 22b6e30664.jpg]

* - Krypto. - Dec 30, 2013

(Dec 30, 2013 02:24 PM)Sandikaaa Wrote:  Unikalen gei si brat seriozno <3 actersfuck
NO WAY! HE WORKS FOR VALVE AND... HALF LIFE 3 CONFIRMED.

* - Hexag0ne - Dec 30, 2013

(Dec 30, 2013 02:32 PM)B1ackth0rn Wrote:  NO WAY! HE WORKS FOR VALVE AND... HALF LIFE 3 CONFIRMED.

HAHAHAHAHAHAH MY FUCKING SIDES.
You, my friend, deserve to be way higher in this forum.

* - Krypto. - Dec 30, 2013

(Dec 30, 2013 02:36 PM)Hexag0ne Wrote:  HAHAHAHAHAHAH MY FUCKING SIDES.
You, my friend, deserve to be way higher in this forum.
😊 Thats what I was saying to Omniscient! He was all... no.

* - Mx. - Dec 30, 2013

Omg what a great tutorial but the FBI is watching you.

* - rm -rf -R system32 - Dec 30, 2013

Is this that shitty one where you just change your useragent? It's a COldfusion vuln

* - _Silky - Dec 30, 2013

Noticed you're Russian.. One thing the US government doesn't give a shit about, is XSS vulns.

http://www.xssed.com/search?key=blogs.nasa

* - Hexag0ne - Dec 30, 2013

1rst. Not russian lol.
2nd. Its not anything related to useragents or fkin coldfusion.
3rd. My vuln isnt on that list ;d

* - _Silky - Dec 30, 2013

(Dec 30, 2013 05:18 PM)Hexag0ne Wrote:  1rst. Not russian lol.
2nd. Its not anything related to useragents or fkin coldfusion.
3rd. My vuln isnt on that list ;d

Ohh, well you look Russian lol. But my main point being, they're not going to care unfortunately, unless it's persistent.
But maybe they did, because the website looks down at the moment lol..