Method: Post XSS
![[Image: 1lTty0u.jpg]](https://i.imgur.com/1lTty0u.jpg)
Not many people have found vulns in 4chan so this is a great little achievement for me. lol
and also for those who will say this is probably fake, the page isn't fully loaded.
if you know 4chan, it'll ask you to type out a captcha after the message that was shown in the screen shot.
Anyways Thoughts?
If it is persistent one, then it is very useful >:)
(evil laugh)
Well, congrats! :D
How the hell did you get so good at XSS? I need to learn it, but I have been procrastinating :/. Anyways nice find 🤝!
he blacked out half of the link to hide the fact that it is nothing more than a self xss
(Sep 25, 2013 07:35 AM)frictionless Wrote: he blacked out half of the link to hide the fact that it is nothing more than a self xss
Are you mentally retarded Mr.Sherlock? I said its a post XSS.
and I obviously blacked out the link because I'd rather keep it as a 0day than give it out to some idiot and probably will take the credits for himself.
Hell even when I click on "OK"
This shit shows up
![[Image: VZ4s6hz.png]](https://i.imgur.com/VZ4s6hz.png)
(Sep 25, 2013 08:20 AM)Lozab Wrote: Are you mentally retarded Mr.Sherlock? I said its a post XSS.
and I obviously blacked out the link because I'd rather keep it as a 0day than give it out to some idiot and probably will take the credits for himself.
Hell even when I click on "OK"
This shit shows up
xss != 0day.
do you feel accomplished with yourself for earning your first skidmark
(Sep 25, 2013 08:58 AM)frictionless Wrote: xss != 0day.
do you feel accomplished with yourself for earning your first skidmark
Actually, lots of people call it a 0day, you're just little noob aren't you? :)
Seriously if you're gonna flame, just get off this thread.
(Sep 25, 2013 08:58 AM)frictionless Wrote: xss != 0day.
do you feel accomplished with yourself for earning your first skidmark
A 0DAY is when it hasn't been discovered you moron.
(Sep 25, 2013 09:24 AM)Rayquaza™ Wrote: A 0DAY is when it hasn't been discovered you moron.
If it's not discovered how can you apply it?
Zero day simply means the Receiver of the attack had zero days to patch the vuln..
It's a rare exploit in other hands, and it's unknown by the system that it's being used.
(Sep 25, 2013 09:27 AM)OhNoMoney Wrote: If it's not discovered how can you apply it?
Zero day simply means the Receiver of the attack had zero days to patch the vuln..
It's a rare exploit in other hands, and it's unknown by the system that it's being used.
Eh? 0day means that has not been released or known about by the general public.
I thought IE users dies with dinosaurs.
(Sep 25, 2013 09:32 AM)MaXoNe Wrote: I thought IE users dies with dinosaurs.
it's actually hell of a lot easier to find XSS with IE...For me at least.
Use Owasp Mantra , it's like Mozilla on steroids :)
DO NOT DEAL WITH THIS MEMBER
Anyone calling this is 0day is retarded. Plain and simple
Good find OP
Nice find, OP.
Some of the people in here need to learn their interwebsss.
|
