[KING-T]

Nice tut. This will help many people out 👍

[FeAR Being]

you deserve to die...DOUBLE POSTERS DESERVE TO DIE !!!this tut is copied from zero thunder hacker ! n00b !

rolf gtfo my tutorial.And if someone copyed it was him, I posted this on evileXe while we were still in like nov 2008.

So gtfo.

Lol nice tut i read this on hbx keep it up.

Yo ExPl0iT.

Just so that noob up doesnt think about stuff, he saw this tut, posted by me!

[Judge Dredd]

Ok, ok, enough with flaming.

[FeAR Being]

Ok, ok, enough with flaming.

Agreed 😑

[titoscol]

good turtorial thX :)

[mush]

i fout site that vurnelable and then i did this:
<img src="yourevilpic.com">
but can i do that the picture stays thre and other people can see this?

[KING-T]

i fout site that vurnelable and then i did this:
<img src="yourevilpic.com">
but can i do that the picture stays thre and other people can see this?

Depends.. I ususally like to XSS Forums Then i put my command in the title so that it will always be there whenever someone clicks on that section.

[mush]

thx but can you explain how i do this ?

[batfink]

the cookie catcher bit is exactly the same to one i saw on youtube...as in you've pretty much just copied what they said and wrote it

and the defacement bit only works on the machine the xss was executed on..and is temporary

[adtechniques]

I'll try and post test results for everyone. Thks man.

[FeAR Being]

the cookie catcher bit is exactly the same to one i saw on youtube...as in you've pretty much just copied what they said and wrote it

and the defacement bit only works on the machine the xss was executed on..and is temporary

I just made the tutorial, I didint code it.

And your wrong about the imag xss btw.

[Nerv]

man thanks
good work
i have been looking for a tutorial like this

[FeAR Being]

I even enjoy writing this tutorials :P

[Dark0ne1]

So you can enter <script>alert("XSS");</script> anywhere and then just press enter? I tried in a login form at some forum and obviously it said like wrong password or something.

[FeAR Being]

So you can enter <script>alert("XSS");</script> anywhere and then just press enter? I tried in a login form at some forum and obviously it said like wrong password or something.

No, it will only work if the site has this code on the source:

Something like:

Code

<?php

echo ("<img src=" . $_GET['a'] . "></img>");

?>