ProxiesFood: Unlimited Residential Proxy ◆ Spoof Call and Spoof SMS set any caller ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › [#OP XSS] VOICE OF GREY HAT[TEAMHAV0K]

New Reply 

[#OP XSS] VOICE OF GREY HAT[TEAMHAV0K]
orunu
Guest
 
Jan 21, 2012 10:04 AM
welp its happened TeamHav0k has been officially published! VOGH published an article i've wrote up for the team containing all of the recent XSS finds of the team :).

VOGH:
http://www.voiceofgreyhat.com/2012/01/hu...-many.html
Best Teemo NA
Best Teemo NA Offline
Instalock FTW! Teemo #1
***
HF l33t
Posts:
2,401
Threads:
140
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jan 21, 2012 10:06 AM
Awesomeness bro more #OPs to come in near future.
[Image: s2LT8w1.png]
SIM-974023
SIM-974023 Offline
HF Dolla
***
HF l33t
Posts:
2,201
Threads:
188
Credibility:
1001
Popularity:
44
βytes:
β 0
Game XP:
11
Jan 21, 2012 10:08 AM
Nice coverage.
But I think it is over-exaggerated on the vulnerable parts.
Best Teemo NA
Best Teemo NA Offline
Instalock FTW! Teemo #1
***
HF l33t
Posts:
2,401
Threads:
140
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jan 21, 2012 10:10 AM (This post was last modified: Jan 21, 2012 10:11 AM by Best Teemo NA.)
(Jan 21, 2012 10:08 AM)SIM-974023 Wrote:  Nice coverage.
But I think it is over-exaggerated on the vulnerable parts.

No not really those are trusted site that most people know send them to a payload link and they would have no clue and if you think all you can do with those is an alertbox please go read up on Cross Site Scripting attack methods before you try to trash our finished OP cheers
[Image: s2LT8w1.png]
orunu
Guest
 
Jan 21, 2012 10:10 AM
(Jan 21, 2012 10:08 AM)SIM-974023 Wrote:  Nice coverage.
But I think it is over-exaggerated on the vulnerable parts.

just because they are not persistent doesn't mean they are useless or anything, they can still be used in conjuncture with a XSS Tunnel&Shell or a Cookie Stealer. If you understood the dangers of XSS you would no that even a non-peristent in the right hands can turn very deadly.
Hooded Robin
Hooded Robin Offline
[email protected]
***
HF Ub3r
Posts:
2,272
Threads:
104
Credibility:
000
Popularity:
77
βytes:
β 0
Game XP:
0
Jan 21, 2012 11:18 AM
Good job guys! If you dont think XSS is a big deal then check out this video I made just to give you an idea: https://hackforums.net/showthread.php?tid=1853635

XSS to Meterpreter Shell against fully patched Windows 7 box :p

agentannon
agentannon Offline
[closed@HF:]
Posts:
456
Threads:
40
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jan 21, 2012 11:31 AM
They exaggerated a bit, but still, great story.
orunu
Guest
 
Jan 21, 2012 12:35 PM
Thanks everyone, but how exactly did they exaggerate? I dont see how they exaggerated our finds in any way.
4rch1t3ct
4rch1t3ct Offline
(='-'=)
Posts:
512
Threads:
46
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 1, 2012 08:21 AM
I am back guys.. when you get on msg me I have something we should discuss.
kobez
Guest
 
Feb 1, 2012 09:06 AM
Congrats Team Hav0k, that's a major acheivement :)
orunu
Guest
 
Feb 1, 2012 02:39 PM
(Feb 1, 2012 08:21 AM)4rch1t3ct Wrote:  I am back guys.. when you get on msg me I have something we should discuss.

do u have any news on inertia? havnt heard a word from him since the day both of u vanished into thin air.
Best Teemo NA
Best Teemo NA Offline
Instalock FTW! Teemo #1
***
HF l33t
Posts:
2,401
Threads:
140
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 1, 2012 07:15 PM
(Feb 1, 2012 09:06 AM)kobez Wrote:  Congrats Team Hav0k, that's a major acheivement :)

lol kobez we already had op xss 2.0 you be late(:
[Image: s2LT8w1.png]
kobez
Guest
 
Feb 1, 2012 07:18 PM
(Feb 1, 2012 07:15 PM)Best Teemo NA Wrote:  lol kobez we already had op xss 2.0 you be late(:

I saw it on ehn broski 😈😈
seen the progress of ma shell? :D
Best Teemo NA
Best Teemo NA Offline
Instalock FTW! Teemo #1
***
HF l33t
Posts:
2,401
Threads:
140
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 1, 2012 07:25 PM
(Feb 1, 2012 07:18 PM)kobez Wrote:  I saw it on ehn broski 😈😈
seen the progress of ma shell? :D

yesh i have its looking quite nice.
[Image: s2LT8w1.png]
kobez
Guest
 
Feb 1, 2012 07:25 PM
(Feb 1, 2012 07:25 PM)Best Teemo NA Wrote:  yesh i have its looking quite nice.

Got heaps of functions working now :D
going to add a login section to protect shell ;)
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Gee4rceApr 19, 2021 06:47 AM 26 4,062 Apr 19, 2021 06:47 AM
Last Post: theghostofgreen
by longwenzhangDec 12, 2019 07:54 AM 0 229 Dec 12, 2019 07:54 AM
Last Post: longwenzhang
by frank3nstienJul 18, 2019 10:38 PM 2 325 Jul 18, 2019 10:38 PM
Last Post: frank3nstien