[NgativeZero]

Disclaimer:
I am NOT responsible for ANYTHING you script kiddies do with what I'm about to show you, the intermediate, & elite prolly have already done this anyways, so I don't have to worry about them as much.
This information is for EDUCATIONAL purposes ONLY.
What you do with this information is YOUR responsibility.

Hey, I was looking at all these tutorials, and I thought I'd make one of my own. So, here goes...

I have been researching hacking techniques for over 3 years now, tried one out for myself, and got caught... (forgot to cover my tracks... Amateur's mistake. lol.) and have since been researching different techniques to try again... And I THINK I have one, and I thought "Why should I keep this knowledge away from the other elite, intermediate, and script kiddie hackers? Knowledge IS power, so... Why not make the hackers of the world more powerful?" So, here I am.

Now, before I begin, I wanna address the Script Kiddies reading this...
LEARN BEFORE YOU HACK!!!! There are a few things you'll need to know before you read any further, such as:

1. PHP Programming
2. Javascript Programming
3. HTML Programming
4. The difference between a Local XSS Attack, a Non-Persistant XSS Attack, and a Persistant XSS Attack.
5. What Phishing Attacks are

Now, seeing as how the Script Kiddies that LISTENED have actually researched AND are now continuing to read with their heads FILLED with knowledge, I can continue.

Now, just to get the obvious stuff outta the way, Cross Site Scripting (XSS) occurs when a user inputs malicious data into a website, which causes the application to do something it wasn't supposed to do.

Just a bit of info for you guys who are bored... Some of the BIGGEST sites have been affected by XSS attacks such as the FBI, CNN, eBay, Apple, Microsoft, and AOL. (This is where the PS3 Guy comes in and says "ka-pussssshhhhhhhhhhhh like in the little big planet commercial XD)(Mind= BLOWN)(I know, I know. Bad joke, moving on...)

Now, the website features commonly vulnerable to XSS attacks are:

Search Engines
Login Forms
Comment Fields

Now, seeing as you all OBVIOUSLY are either intermediate, or elite hackers, & therefore, I have NO idea what you're doing reading this, you should already know this. Lol. And the script kiddies should have already researched this, SO, I don't really need to explain what the different types of XSS attacks are. So, we're moving on...

How to tell if a site is vulnerable to an XSS attack you say?

Well, if there's a search field, enter a word and if that word is displayed back to you on the next page there's a chance it is vulnerable.

Now, you insert some HTML. Search for the following:
<h1>hi</hi>
And if the word "hi" is outputted as a big header, it is vulnerable.

Now you insert some Javascript, Search for the following:
<script>alert("hi");</script>
And if the word "hi" pops up in a popup box, then he site is vulnerable to XSS.




Ok, NOW we get to the actual HACKING part.

Let's say you want to phish passwords(script kiddies had better know about this or you'll be lost.) from www.victim-site.com. If you were able to find an XSS vulnerability anywhere on the website, you would be able to craft a link pointing to the legit website that redirects to your phishing website.

Now, remembering the example with the Javacript popup... When you inserted the Javascript into the search box, a URL should have been made that looked like this:

http://localhost/form.php?searchbox=<script>alert("hi")<%2Fscript>&search=Search!

In the URL you replace everything in between
?searchbox=
and
&search
with the following Javascript:

<script>window.location = "http://phishing-site.com"</script>

Now when you go to the finished link, the legit site will redirect to the phishing site.
Next what you wanna do, is encode the URL to make it look more legit and less suspicious. You can encode the URL at the following site:

http://www.encodeurl.com/

Once your victim sees that the link points to the legit website, he/she'll be more likely to fall for the phishing attack.



Hope you all learned something by this, and that you'll use this knowledge properly.

If any of you have any questions, please, ask me. I'm usually online.

Have fun HCU!!!

(-0)