ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › [XSS][Persistent] 4shared.com

New Reply 

[XSS][Persistent] 4shared.com
Pillows
Pillows Away
Hope? Despair?
*****
HF Ub3r
Posts:
10,718
Threads:
532
Credibility:
200
Popularity:
111
βytes:
β 60.8
Game XP:
0
Dec 21, 2011 11:44 PM (This post was last modified: Dec 27, 2011 07:33 PM by Pillows.)
PHP Code

<?php 
http://www.4shared.com/folder/Ppp265OC/_online.html 

[edited]

It got me 1764705 points on RankMyHack which ed me to rank 13 on my first XSS report on the site and put me on the #1 rank for top hack.
[Image: wOdD4yf.gif]
~!White!~
Guest
 
Dec 21, 2011 11:48 PM
Good job i didn't know that you can submit Persistent Xss vulns i would of done that.

Keep up the good work :)
Pillows
Pillows Away
Hope? Despair?
*****
HF Ub3r
Posts:
10,718
Threads:
532
Credibility:
200
Popularity:
111
βytes:
β 60.8
Game XP:
0
Dec 21, 2011 11:51 PM
(Dec 21, 2011 11:48 PM)~!White!~ Wrote:  Good job i didn't know that you can submit Persistent Xss vulns i would of done that.

Keep up the good work :)

Submit all google.com XSS vulns = profit$$$$
[Image: wOdD4yf.gif]
-DownFall
-DownFall Away
Inactive as of 6/10/14
***
HF Ub3r
Posts:
2,572
Threads:
128
Credibility:
000
Popularity:
9
βytes:
β 0
Game XP:
0
Dec 21, 2011 11:52 PM
inb4 ZeroPwn posts his persistent FB find.
[Image: Rtkpf.png]

MSN - [email protected]

Web Hacking

zer0pwn
zer0pwn Away
[email protected]
***
HF Ub3r
Posts:
2,123
Threads:
318
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 21, 2011 11:59 PM
Nice job!
Wow, I'm extremely impressed, I wouldn't have even thought of the file upload, :P.
Good job!
[Image: ag0dyBC.png]
cheatson
cheatson Offline
✞υღ♭ℓḯᾔℊ ⅾøωᾔ ☂♄ℯ ґα♭b☤т нøłℯ
***
HF l33t
Posts:
1,447
Threads:
117
Credibility:
000
Popularity:
6
βytes:
β 0
Game XP:
0
Dec 22, 2011 03:38 AM
(Dec 21, 2011 11:44 PM)Pillows Wrote:  
PHP Code

<?php 
http://www.4shared.com/folder/Ppp265OC/_online.html 

It's a persistent XSS which I used by uploading files with XSS syntaxes in them. (Yay mac for not filtering < and >)

It got me 1764705 points on RankMyHack which ed me to rank 13 on my first XSS report on the site and put me on the #1 rank for top hack.

Congratulations- I saw this trick before on file sharing sites but its cool to see it has more widely reaching implications especially on sites of that calliber! Congrats too on getting the number 1 hack on RMH!
Vid:​If Hitler Was A Hacker Newbie

Blog:http://hackers2devnull.blogspot.co.uk

whizzy
whizzy Offline
[n00b@HF:]
*
Registered
Posts:
17
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 22, 2011 12:13 PM
Thats an awesome hack. please throw some light on the same.
HaxOr❤
HaxOr❤ Offline
INTRA
***
HF Ub3r
Posts:
4,952
Threads:
209
Credibility:
000
Popularity:
955
βytes:
β 100.5
Game XP:
0
Dec 22, 2011 12:22 PM
This was discovered on MediaFire too.
Nothing new really.
Pillows
Pillows Away
Hope? Despair?
*****
HF Ub3r
Posts:
10,718
Threads:
532
Credibility:
200
Popularity:
111
βytes:
β 60.8
Game XP:
0
Dec 22, 2011 06:12 PM
(Dec 22, 2011 12:22 PM)HaxOr❤ Wrote:  This was discovered on MediaFire too.
Nothing new really.

Yeah that's how I got the idea too. It almost worked on mediafire as well until it filtered the <! and >.
[Image: wOdD4yf.gif]
RustyRose
Guest
 
Dec 22, 2011 07:13 PM
YOU LEECHER, YOU DIDN'T DISCOVERED THIS SHIT.

IT IS ORIGINALLY DISCOVERED BY "CyanXSS"
sangar66
sangar66 Offline
[closed@HF:]
Posts:
388
Threads:
55
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Dec 22, 2011 07:27 PM
Calm down, caps are not good... I don't know if they leeched, I personally haven't seen CyanXss's post, and you have no way of knowing who found it first....
Members like this are those who hurt HF's reputation....
Pillows
Pillows Away
Hope? Despair?
*****
HF Ub3r
Posts:
10,718
Threads:
532
Credibility:
200
Popularity:
111
βytes:
β 60.8
Game XP:
0
Dec 22, 2011 07:59 PM
(Dec 22, 2011 07:13 PM)RustyRose Wrote:  YOU LEECHER, YOU DIDN'T DISCOVERED THIS SHIT.

IT IS ORIGINALLY DISCOVERED BY "CyanXSS"

How did you find that name? I thought I removed that from there. By the way I used to use the name CyanXSS. This is proof:

[img]http://i.minus.com/isbuLClguLO30.png[/img]

Only reason why there is no @CyanXSS account is because I renamed it to the @ring0xss account.

If you still don't believe me...

http://rankmyhack.com/userview.php?user=CyanXSS
[Image: wOdD4yf.gif]
D@rKL0rd
Guest
 
Dec 26, 2011 05:46 AM
yeh its cyanXSS aka ring0..

nice job...!!
The Ion
The Ion Away
[bin@HF:]
***
HF l33t
Posts:
1,074
Threads:
66
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 26, 2011 06:58 AM
nice job dude keep up the good work
BradRDAnews420
BradRDAnews420 Offline
Owner of RMH! :)
***
HF l33t
Posts:
744
Threads:
50
Credibility:
000
Popularity:
11
βytes:
β 0
Game XP:
0
Jan 22, 2012 12:16 PM
Nice one, when I noticed this I had to double check the legitimacy of it :P... Congrats on top hack, try and go for 1st place leaderboard now ;)

P.S not sure if you'd count 27days a grave-dig but lol w.e :3

-Brad
I've been gone a while but I'll be back...
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by rchowavijitJan 12, 2024 01:15 AM 0 172 Jan 12, 2024 01:15 AM
Last Post: rchowavijit
by Gee4rceApr 19, 2021 06:47 AM 26 4,067 Apr 19, 2021 06:47 AM
Last Post: theghostofgreen
by Gee4rceApr 13, 2021 09:59 AM 5 309 Apr 13, 2021 09:59 AM
Last Post: Gee4rce