[Lozab]

Method: Post XSS
Spoiler (Click to View)

Not many people have found vulns in 4chan so this is a great little achievement for me. lol

and also for those who will say this is probably fake, the page isn't fully loaded.

if you know 4chan, it'll ask you to type out a captcha after the message that was shown in the screen shot.

Anyways Thoughts?

[Night Baron]

If it is persistent one, then it is very useful >:)
(evil laugh)

Well, congrats! :D

[Lozab]

he blacked out half of the link to hide the fact that it is nothing more than a self xss

Are you mentally retarded Mr.Sherlock? I said its a post XSS.
and I obviously blacked out the link because I'd rather keep it as a 0day than give it out to some idiot and probably will take the credits for himself.

Hell even when I click on "OK"
This shit shows up

[Lozab]

xss != 0day.

do you feel accomplished with yourself for earning your first skidmark

Actually, lots of people call it a 0day, you're just little noob aren't you? :)

Seriously if you're gonna flame, just get off this thread.

[Rayquaza™]

xss != 0day.

do you feel accomplished with yourself for earning your first skidmark

A 0DAY is when it hasn't been discovered you moron.

[OhNoMoney]

A 0DAY is when it hasn't been discovered you moron.

If it's not discovered how can you apply it?

Zero day simply means the Receiver of the attack had zero days to patch the vuln..
It's a rare exploit in other hands, and it's unknown by the system that it's being used.

[Lozab]

If it's not discovered how can you apply it?

Zero day simply means the Receiver of the attack had zero days to patch the vuln..
It's a rare exploit in other hands, and it's unknown by the system that it's being used.

Eh? 0day means that has not been released or known about by the general public.

[Lozab]

I thought IE users dies with dinosaurs.

it's actually hell of a lot easier to find XSS with IE...For me at least.

[harveyhf]

it's actually hell of a lot easier to find XSS with IE...For me at least.

what? How does the browser effect how easily it is to find XSS exploits....

[Lozab]

what? How does the browser effect how easily it is to find XSS exploits....

Well you're probably still haven't learned much about XSS filters, most people will tell you to use Firefox because it doesn't filter out XSS, that's not entirely true because Firefox filters some queries that are important, however IE if you disable XSS filters, there is more chances of you finding XSS, I can't really explain it because I'm on a phone atm, but my XSS on 4chan seems to be working on both browsers.

So I use IE so I don't miss any valuable XSS vulns.

[3vilHacker]

Um forget what I just said im tired....

[B0$$]

Nice find OP !! and i totally have to agree had a good laugh !~! ;D

Spoiler (Click to View)

OhNoMoney Wrote: If it's not discovered how can you apply it?

Zero day simply means the Receiver of the attack had zero days to patch the vuln..
It's a rare exploit in other hands, and it's unknown by the system that it's being used.

busted !! 😏 😏 😏