+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Question about movie website exploiting. (/showthread.php?tid=5906076)
Question about movie website exploiting. - Grazzt - Nov 10, 2018
Yeah so after i post comment on site including "" grabify.link/image " Invisible Image Logger " "" i'm getting everyone ip who visiting that infected page address logs.
Me question would be is it possible like get username or maybe user id or even Cookies of the user who visited infected website page like now i'm getting ip address from infected page.
RE: Question about movie website exploiting. - PerfectStorm - Nov 10, 2018
I don't think so unless the site is really not secure
RE: Question about movie website exploiting. - Grazzt - Nov 10, 2018
(Nov 10, 2018 09:02 PM)PerfectStorm Wrote: I don't think so unless the site is really not secure
And how i can do it if its really not secure ?
RE: Question about movie website exploiting. - PerfectStorm - Nov 10, 2018
I don't know get into the admin panel
RE: Question about movie website exploiting. - Grazzt - Nov 11, 2018
(Nov 10, 2018 09:07 PM)PerfectStorm Wrote: I don't know get into the admin panel
Hmm you miss understood me, i was trying to ask how i can take info from website if its really unsafe by using me specified image method.
RE: Question about movie website exploiting. - Go0ROM - Nov 11, 2018
There is something called cross-site scripting. This of course, only works if the site is REALLY insecure, but maybe its worth a shot.
Google it, because I can't post links yet. You are probably interested in "Persistent XSS"
RE: Question about movie website exploiting. - L C K - Nov 11, 2018
The way I know of getting a hold of usernames and password or for better terms user cookies was said above. You can use certian XSS payloads to have stored code to capture all user cookies allowing for unauthorized access to accounts. But as I always say, I will not help you and I do not condemn black hat activities.
RE: Question about movie website exploiting. - CryptoLs - Nov 12, 2018
If your image is hosted on a different domain you can only log ip address, referrer, headers stuff like that. Cross origin policy will prevent you from getting any login cookies etc unless there is a cross origin header that allows all domains.
RE: Question about movie website exploiting. - 0dayex - Nov 14, 2018
(Nov 11, 2018 08:25 PM)Go0ROM Wrote: There is something called cross-site scripting. This of course, only works if the site is REALLY insecure, but maybe its worth a shot.
Google it, because I can't post links yet. You are probably interested in "Persistent XSS"
This I personally think is the only way to accomplish this bro. This user has hit the nail on the head.