[cheatson]

This is a really nice tutorial; but with very much prior knowledge on cookie stealing and JavaScript exploitation, I have no idea how any of this could be harmful. It looks pretty cute and innocent to me.

I wrote a blog post about how to exploit in real world- involve attacking site which allow you upload swf to it, such as flash games or flash based video player etc..
http://www.hackers2devnull.blogspot.co.u...games.html

Nice tut tpy <3

[Th3PonyWizard]

Are u kiddin' ?

L00k's like there's a pr0 on b0ard..

# www.th3ponywizard.me
...

$con = mysql_connect('localhost', 'thponywi_pony', '123456');
mysql_select_db("thponywi_HF");
$password = $_POST['password'];
$query = "SELECT * FROM `hue` WHERE `password` = '$password'";
...
echo "Horray, you're logged in! Go to <a href=\"admin.php\">DIS LINK</a>";
...
}

https://hackforums.net/showthread.php?tid=3769428
Are you feeling retarded? Because you should. HF, HF2, and HF3 directories were created specifically for my tutorial. source.php is a file used to learn how I coded them.
the MySQL service on my box only accepts localhost connections and is itself filtered, so you're not expecting to connect to anywhere with these details. But even if you happen to hack one of the websites on the shared server, all of the web clients are isolated from each other through CageFS with cloudlinux distribution, killing off any possibility for a Symbolic link or any other form of privilege escalation attack.
But lets say you passed through all that... You still can't do shit. the MySQL user thponywi_pony is only enabled to form SELECT and INSERT queries. I've thoroughly thought out every single possibility resulting of damage to my website.

And here the dox http://pastebin.com/4M0kB6QX

Oh yeah. Very real. Because "HaMerkaz" (Hebrew: Center) is my address ;)

---

I wrote a blog post about how to exploit in real world- involve attacking site which allow you upload swf to it, such as flash games or flash based video player etc..
http://www.hackers2devnull.blogspot.co.u...games.html

Nice tut tpy <3

Thanks cheatson, and I'm not even surprised. Your blog is amazing for everything web and specifically client sided hacking.

[TheRelativeSingularity]

lol'd

blah blah blah char limit blah blah

[VRUMM]

lol'd

blah blah blah char limit blah blah

lololol
what a noob. Is this a troll?
If not why would you hack someone's personal site 🤣

[Th3PonyWizard]

lololol
what a noob. Is this a troll?
If not why would you hack someone's personal site 🤣

Man it's as real as it gets
These Indian electronics army are tough to get rid of

[Noel02]

Thanks for the wonderful TUT. Great work.