[orunu]

welp its happened TeamHav0k has been officially published! VOGH published an article i've wrote up for the team containing all of the recent XSS finds of the team :).

VOGH:
http://www.voiceofgreyhat.com/2012/01/hu...-many.html

[orunu]

Nice coverage.
But I think it is over-exaggerated on the vulnerable parts.

just because they are not persistent doesn't mean they are useless or anything, they can still be used in conjuncture with a XSS Tunnel&Shell or a Cookie Stealer. If you understood the dangers of XSS you would no that even a non-peristent in the right hands can turn very deadly.

[orunu]

Thanks everyone, but how exactly did they exaggerate? I dont see how they exaggerated our finds in any way.

[kobez]

Congrats Team Hav0k, that's a major acheivement :)

[orunu]

I am back guys.. when you get on msg me I have something we should discuss.

do u have any news on inertia? havnt heard a word from him since the day both of u vanished into thin air.

[kobez]

lol kobez we already had op xss 2.0 you be late(:

I saw it on ehn broski 😈😈
seen the progress of ma shell? :D

[kobez]

yesh i have its looking quite nice.

Got heaps of functions working now :D
going to add a login section to protect shell ;)