+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: XSS'ED Some pretty nice sites. Check them out. Will be updated daily. (/showthread.php?tid=4306260)
XSS'ED Some pretty nice sites. Check them out. Will be updated daily. - de morte hominis - Jun 25, 2014
I been looking to xss some HQ sites recently, well I done did it. Check out my XSS'S.
Ford Social: http://prntscr.com/3wj47b
Ford Owner: http://prntscr.com/3wj4l0
Fords fund raising site for cancer: http://prntscr.com/3wj517
Obamas website for donations: http://prntscr.com/3wj6gc
American Educational Research Association: http://prntscr.com/3wj8pl
SBA.GOV: http://prntscr.com/3wkrat
ILSOS.GOV: http://prntscr.com/3wksrb
Secure.Utah.GOV: http://prntscr.com/3wksz2:
Brighthouse.com: http://prntscr.com/3z7sq5
I'll be posting threads about xss's I find that are pretty cool.
Also, Have a good day, peace.
* - Friedrich Schiller - Jun 25, 2014
inb4 photoshopped.
But seriously, wow nice job dude. How long did it take you to do these?
* - Programming - Jun 25, 2014
Fucking shit. Report these before I do and get some moolah.
* - de morte hominis - Jun 25, 2014
(Jun 25, 2014 05:26 PM)The Black Hat Wrote: inb4 photoshopped.
But seriously, wow nice job dude. How long did it take you to do these?
About a week. I just felt like making xss collection that I find on the net. these were the best. The obama one you can test yourself on the donation page. it's not fixed but idk about ford I reported that one the rest are unpatched.
(Jun 25, 2014 05:27 PM)Programming Wrote: Fucking shit. Report these before I do and get some moolah.
Go ahead idc. These sites offer me nothing valuable most are non persistant.
* - NoodleBot™ - Jun 25, 2014
(Jun 25, 2014 05:27 PM)Programming Wrote: Fucking shit. Report these before I do and get some moolah.
There definitely wouldn't be any reward for the Obama one, as it was done without authorization. In fact, have at it and report them. That'd be a mistake.
Inb4 predator drone strike.
* - de morte hominis - Jun 25, 2014
(Jun 25, 2014 05:41 PM)NoodleBot™ Wrote: There definitely wouldn't be any reward for the Obama one, as it was done without authorization. In fact, have at it and report them. That'd be a mistake.
Inb4 predator drone strike.
yeah bad idea to report I just find these for fun. Yall can mess with these if your dumb enough.
* - Avocado - Jun 26, 2014
These are pretty lame, you've just used some random vector for every single site. No skill involved there.
* - Th3PonyWizard - Jun 26, 2014
(Jun 25, 2014 05:41 PM)NoodleBot™ Wrote: There definitely wouldn't be any reward for the Obama one, as it was done without authorization. In fact, have at it and report them. That'd be a mistake.All of them were done without authorization. 98% of all XSS patterns are being done without authorization.
Inb4 predator drone strike.
* - Avocado - Jun 26, 2014
(Jun 26, 2014 03:04 AM)Th3PonyWizard Wrote: All of them were done without authorization. 98% of all XSS patterns are being done without authorization.
that statistic. Can i get some citation on that.
* - Th3PonyWizard - Jun 26, 2014
(Jun 26, 2014 05:42 AM)Avocado Wrote: that statistic. Can i get some citation on that.Your daily statistical information is brought to you by Pony Networking LTD.
Do not redistribute.
* - Bob23 - Jun 26, 2014
lol, who cares? It's useless shit.
Try to find an xss in twitter,google,facebook that takes real skill instead of these shit sites.