English
German
French
Spanish
Albanian
Arabic
Dutch
Bosnian
Serbian
Turkish
Czech
Finnish
Hungarian
Italian
Polish
Russian
Estonian
Urdu
News
Links
Sites
Forum
Ranking
Challenges
Downloads
Register
New Sites
mrradio.kr
GemForgeLabs
Hack The Web
HackMyVM
pwn.college
PromptRiddle
PyDéfis
CryptoHack
New Users
sh4d0wp4ws
plus
frootgummi
xen-ops
jexi
Snauser
VodkaVladi
ali1
10 Online
Guest(x9)
,
andthewinneris
Signup
Hide Sidebar
Restrict session to IP
Register
Forgot password
Statistics
44 Sites
197 Challs
9899 Posts
73485 Users
52 Donations
1 Shop
44 Active Sites
World of Wargame
WeChall
TheBlackSheep
Rankk
Electrica
NewbieContest
BrainQuest
Net-Force
HackThisSite
elhacker.net
TryThis0ne
TDHack
+Ma's Reversing
Hacker.org
HackBBS
Root-Me
SPOJ
Revolution Elite
W3Challs
Gekko
Webhacking.kr
Reversing.Kr
SuNiNaTaS
Yoire
Hacking-Challenges
OverTheWire.org
RedTigers Hackit
ae27ff
pwnable.kr
RingZer0 Team Online CTF
pwnable.tw
Hack The Box
try to decrypt
MysteryTwister
Énigmes À Thématiques
247CTF
CryptoHack
PyDéfis
PromptRiddle
pwn.college
HackMyVM
Hack The Web
GemForgeLabs
mrradio.kr
Top 10 Players
rayaseiren
dloser
jusb3
ytbjplh
tehron
Caesum
tenflo
sisyang
Xaav
noother
Last 20 Activities
ms_nobody
DevilDog
j_m
Jinx
mm301
ossa
boiled_pickles
Jinx
mozaa
yehuju
yehuju
raikoug
peterkodo
jexi
yugandhar
raikoug
sambo
xen-ops
Celcious
benito255
Online within 1d
1 Users
andthewinneris
WeChall
->
Bug Report
Login Referer XSS
Linking with no challs solved
small typo
quangntenemy
Global Rank: 24
Totalscore: 390563
Posts: 263
Thanks: 215
UpVotes: 274
Registered: 18y 257d
Last Seen: 114d 2h
The User is Offline
Login Referer XSS
Mar 31, 2008 - 09:13:51 (18y 217d)
Google/translate
1
Thank You!
0
Good Post!
1
Bad Post!
link
After logging in the page redirects to the referer url without any validation:
You will get redirected to <script>alert(1)</script> in 5 seconds.
Kender
Global Rank: 82
Totalscore: 212797
Posts: 148
Thanks: 207
UpVotes: 109
Registered: 18y 258d
Last Seen: 4y 229d
The User is Offline
Login Referer XSS
Mar 31, 2008 - 14:48:21 (18y 216d)
Google/translate
1
Thank You!
1
Good Post!
0
Bad Post!
link
Tsktsktsk, that's not how I built it. Gizmooooore!!!!
gizmore
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d
Last Seen: 64d 17h
The User is Offline
Send EMail to gizmore
Login Referer XSS
Mar 31, 2008 - 18:00:33 (18y 216d)
Google/translate
1
Thank You!
1
Good Post!
0
Bad Post!
link
yayaya,
i am totally guilty for that
the problem has been fixed now.
btw: this xss was a very poor attack vector ;)
The geeks shall inherit the properties and methods of object earth.
obeid2
,
quangntenemy
,
TheHiveMind
,
Z
,
balicocat
,
Ge0
,
arraez
,
jcquinterov
,
hophuocthinh
,
alfamen2
,
burhanudinn123
,
Ben_Dover
,
stephanduran89
,
braddie0
,
fpombal
,
csuquvq
have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 3943 times.