Traffic service & campaign optimization ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › Vulnerabiltiy in Nasa

New Reply 

Vulnerabiltiy in Nasa
myt9h
myt9h Offline
[user@HF:]
*
Registered
Posts:
116
Threads:
18
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 2, 2014 02:24 PM
http://vmo.nasa.gov/vxo/metadata.php?id=wtf+is +this+?

🙃🙃
SohnGottes
Guest
 
Apr 2, 2014 02:26 PM
looks to me like it just outputs whatever you put for id. how is this a vulnerability? the output goes through htmlentities()... 🙂
Ρain
Guest
 
Apr 2, 2014 02:32 PM
Idk about this but I do know NASA has a ton of XSS vulns
myt9h
myt9h Offline
[user@HF:]
*
Registered
Posts:
116
Threads:
18
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 2, 2014 02:34 PM
aww it should not output though in manner like that , reported already to nasa ,but still not fixed
Cubs
Cubs Offline
Photographer
***
HF Ub3r
Posts:
3,443
Threads:
109
Credibility:
000
Popularity:
139
βytes:
β 0
Game XP:
0
Apr 2, 2014 02:34 PM
I am such a l33t haxor

http://vmo.nasa.gov/vxo/metadata.php?id=...as%20+here+?
lillix
Guest
 
Apr 2, 2014 02:35 PM
This isn't an XSS vuln, any HTML script is filtered, you'd at least have to bypass the filter before this is a working vuln.

(Apr 2, 2014 02:34 PM)myt9h Wrote:  aww it should not output though in manner like that , reported already to nasa ,but still not fixed
lolwat
myt9h
myt9h Offline
[user@HF:]
*
Registered
Posts:
116
Threads:
18
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 2, 2014 02:35 PM
(Apr 2, 2014 02:32 PM)Ρain Wrote:  Idk about this but I do know NASA has a ton of XSS vulns

yeah buddy agree it has lots of xss.....
Effexion
Effexion Offline
That Guy with Spiders
*****
Benevolence
Posts:
18,409
Threads:
2,625
Credibility:
5600
Popularity:
755
βytes:
β 137
Game XP:
925
Apr 2, 2014 02:36 PM
Lol, I thought you had hacked NASA whe9n I read the title. Ohhhhhh O..P.
Resident Writer for MyGamer.Com and Horrify.Net
myt9h
myt9h Offline
[user@HF:]
*
Registered
Posts:
116
Threads:
18
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 2, 2014 02:38 PM
(Apr 2, 2014 02:36 PM)Effexion Wrote:  Lol, I thought you had hacked NASA whe9n I read the title. Ohhhhhh O..P.

buddy i just found this worthy ,i share it therefore ......
Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ
Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Away
I'm A Turtle
****
HF l33t
Posts:
8,420
Threads:
369
Credibility:
000
Popularity:
9
βytes:
β 0
Game XP:
0
Apr 2, 2014 02:40 PM
(Apr 2, 2014 02:38 PM)myt9h Wrote:  buddy i just found this worthy ,i share it therefore ......

it is almost as worthless as an xss
Hiring PHP developers does not contribute to the quota of employees with disabilities.
[Image: lPQX27G.png]
(May 17, 2015 08:27 PM)♕ Pimp ♕ Wrote:  you're a waste of my time and giving me cancer.
poxoq
Guest
 
Apr 3, 2014 09:55 AM
all those "vuln" are honeypots.....
Wᴀᴄᴋᴏ
Wᴀᴄᴋᴏ Offline
Ub3r member
Posts:
987
Threads:
47
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 3, 2014 06:18 PM (This post was last modified: Apr 3, 2014 06:20 PM by Wᴀᴄᴋᴏ.)
(Apr 2, 2014 02:40 PM)Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ Wrote:  it is almost as worthless as an xss

I think it's worth less than an XSS. Nothing can even be executed here.
(Apr 3, 2014 09:55 AM)poxoq Wrote:  all those "vuln" are honeypots.....

Why the fuck would they have XSS honeypots? Nobody's going to track somebody down for a reflective XSS unless they do something stupid like email Nasa with the link to a cookie stealer or some shit.
Th3PonyWizard
Guest
 
Apr 4, 2014 02:51 AM
Nasa has more holes than swiss cheese. This one isn't an actual vulnerability although that's arguable. Outputting user input through GET is still a minor risk considering people are retarded enough to fall for Phishing and various SE attempts of which this can be used with.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by ChoupsSep 11, 2020 12:58 PM 13 719 Sep 11, 2020 12:58 PM
Last Post: Sitrep
by AntraxtApr 30, 2016 01:38 PM 4 385 Apr 30, 2016 01:38 PM
Last Post: Gone4Ever
by haqqurMar 10, 2014 06:03 AM 3 439 Mar 10, 2014 06:03 AM
Last Post: ๖ۣۜXilluX