[rfpd]

Basically with this you can post pictures and when they see them some php script will run, and you will store the visitor's ip. So we have 4 files:

.htaccess

PHP Code


<?php 
RewriteEngine on
RewriteRule ^image.gif$ iplogger.php 


iplogger.php

PHP Code


<?php
$log = 'logger.html';
$ip = $_SERVER['REMOTE_ADDR'];
$page = $_SERVER['REQUEST_URI'];
$refer = $_SERVER['HTTP_REFERER'];
$date_time = date("l j F Y  g:ia", time() - date("Z")) ;
$agent = $_SERVER['HTTP_USER_AGENT'];
$fp = fopen("logger.html", "a");
fputs($fp, "
<b>$date_time</b> <br> <b>IP: </b>$ip<br><b>Page: </b>$page<br><b>Refer: </b>$refer<br><b>Useragent: 

</b>$agent <br><br>
");
flock($fp, 3); 
fclose($fp);
?>

logger.html
(empty)

image.gif

EDIT: Most web hosting websites blocks .htaccess, you need to find some that doesn't!

[alewisGB]

You could use email tracking pictures do do exactly the same, instead of putting them into an email just put them on your web page

[rfpd]

You could use email tracking pictures do do exactly the same, instead of putting them into an email just put them on your web page

Yes this is very usefull, but one of the disavantages is that "display" code will not run like alerts, defaces etc, you only can run php code for storing data. Or problably you can but you I haven't found a way to do that, people should focuss on this because every website is vulnerable to this, every single one, I only heard about this recently if we dig up this utilities maybe we can get some gold ;)!

[Misaki Mei]

x3 Thanks for sharing this, going to use this for other things too. o/

[rfpd]

x3 Thanks for sharing this, going to use this for other things too. o/

No problem mate ;) People seem to look out for old and usual news instead of looking to new exploits....

[S.a.b.e.r]

I'd recommend you use htmlentities() to filter the data being sent to your script. Just incase.

[rfpd]

I'd recommend you use htmlentities() to filter the data being sent to your script. Just incase.

So it's a way to bypass code injection?

[S.a.b.e.r]

So it's a way to bypass code injection?

Well in you're code, the unsanitized input is saved in an html file. This makes it vulnerable to persistent XSS.

[rfpd]

Thanks for the help but it's not really a website it's just a new way to hack no one will notice this, but nevertheless good to know!

[Fuizzzy]

Thanks for this, it will be useful someday!! #sp

[Edge of Nowhere]

Thanks for the help but it's not really a website it's just a new way to hack no one will notice this, but nevertheless good to know!

New? Hack?

This is neither. Not trying to sound like an asshole but this has been known for a while.

[rfpd]

New? Hack?

This is neither. Not trying to sound like an asshole but this has been known for a while.

Searching if you posted this..Found nothing, at least I know how to share.. Thanks anyways...

[m0resleep]

Thank you for this! Will try it later ;)

[rfpd]

Thank you for this! Will try it later ;)

No problem mate ;) more to come! I will try to use this exploit and problably find a 0-day :D!

[grifmajster]

Thanks, works pretty nice. I can't rep you, but I would. Thanks!